Yeap very ture, im getting hundreds of emails as in >To Whom It May Concern - >I am a network security engineer from 3Com Corporation and I am >writing to inform you that we have noticed attempts to access >machine(s) on a secured network that seem to have originated from >a machine (x.x.x.x) on your network or under your control. > >log record by service. counts greater than 10 >Port 21: 255 >number of different services: 1 >sample log records with start and end times >CST Jan 18 02:24:23 my ip :21 -> 152.67.75.1:21 SYN ******S* > why the hacker is going to 21 of other peoples networks to find open ones i guess. but we have now blocked that system access only to port 21 now is not accessible from the outside world no more. Reinstall is just going to be hell so things to restore resetup on this box.
At 04:50 PM 1/19/2002 -0800, you wrote: > What you are describing sounds like your computer has been hacked, not >just "ftp". Since you have no way to know what the cracker has changed in >your computer, it won't help to replace ftp; they'll just come in again >and do what they want. The normal approach when a computer has been >broken into is to replace the entire system -- reload RedHat 7.1, then >install all the updates, one of which is wu-ftpd-2.6.1-16.7x. > >On Sat, 19 Jan 2002, Stephen White wrote: > > > I having a nasty deal people are ftp port 21 scanning other peoples network > > from my red hat box 7.1. On top of that ftp is doing strange things > > so i decided to reinstall wu-ftpd > > The newest rpm i could find was wu-ftpd-2.6.1-18.src[1].rpm > > > > I couldnt find anywhere a rpm for redhat 7.1 for > > wu-ftpd-2.6.2 > > just the original source id prefer a rpm for 7.1 if i could find > > one. > > > > Anyway i removed the old ftp rpm and it had a error > > said it could not access in.ftpd > > so i when there and tried to delete it > > rm in.ftpd > > it said > > rm: remove write-protected file `in.ftpd'? y > > rm: cannot unlink `in.ftpd': Operation not permitted > > > > but it doesnt seem to be linked > > -rwxr-xr-x 1 bin bin 173916 Mar 29 2001 in.ftpd > > > > First anyone have a good rpm for redhat 7.1 for wu-ftpd-2.6.2 > > Second any one know how i can get ride of this file so > > i have a nice clean install ? > > Many thanks for any help > > > > > > > > > > > > _______________________________________________ > > Seawolf-list mailing list > > [EMAIL PROTECTED] > > https://listman.redhat.com/mailman/listinfo/seawolf-list > > > >-- >Steven Yellin > > > >_______________________________________________ >Seawolf-list mailing list >[EMAIL PROTECTED] >https://listman.redhat.com/mailman/listinfo/seawolf-list _______________________________________________ Seawolf-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/seawolf-list
