Something weird

From: Ronan Lucio (ronan@melim.com.br)
Date: 11/01/02


From: "Ronan Lucio" <ronan@melim.com.br>
To: <security@freebsd.org>
Date: Fri, 1 Nov 2002 09:59:13 -0300

Hello,

Today, when I logged in my server, last command showed
only one connection (the last).

So, I took a look at "netstat -a" and I havenīt found any connection
from a strange IP on a different port.

I also took a look at "ps -ax" and I didnīt found any strange process
running, too.

After that, Iīve saw that the file /root/.history is dated old (itīs correct
because I use another account with bash shell).

There is possibility that it be an attack/invasion?

Thankīs,
Ronan

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message