Re: Need urgent help regarding security

From: Brian Reichert (reichert_at_numachi.com)
Date: 11/17/05

  • Next message: Cy Schubert: "krb5-1.4.3 is released (fwd)" 
    Date: Thu, 17 Nov 2005 10:54:29 -0500
To: Mark Jayson Alvarez <jay2xra@yahoo.com>

    On Wed, Nov 16, 2005 at 05:25:52PM -0800, Mark Jayson Alvarez wrote:
    > Good Day!
    >
    > I think we have a serious problem. One of our old
    > server running FreeBSD 4.9 have been compromised and
    > is now connected to an ircd server..
    > 195.204.1.132.6667 ESTABLISHED

    I had a 4.9 box compromised though the ssh install (I'm certain it
    wasn't openssh, but the base install), and was running an irc server
    itself.

    I just yanked the box off the net, and scrubbed it flat, and
    reinstalled. In my case, it wasn't worth the time to track who and
    when and how; I needed to put the server back on the net.

    Good luck on chasing them down.

    Are you sure that effort is worth it to you?

    > Thanks..
    >
    >
    >
    >
    > __________________________________
    > Yahoo! Mail - PC Magazine Editors' Choice 2005
    > http://mail.yahoo.com 

    -- 
Brian Reichert				<reichert@numachi.com>
55 Crystal Ave. #286			Daytime number: (603) 434-6842
Derry NH 03038-1725 USA			BSD admin/developer at large	
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Cy Schubert: "krb5-1.4.3 is released (fwd)"

    Relevant Pages

    • Serial ATA Errors
      ... I started seeing some ata errors on a server running FreeBSD 5.4-STABLE ... Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 ... <ACPI PCI bus> on pcib0 ...
      (freebsd-stable)
    • Re: RELENG 6.1/AMD64 system hangs when SMP enabled
      ... I have a dual opteron server running freebsd 6.1/amd64 updated 4 weeks ago. ... to complete) the server sometimes hangs. ... Mostly there are no error messages or anything so I have no clue to what ...
      (freebsd-stable)
    • mrouted + pf problems on 5.3-p1
      ... I had a server running FreeBSD 5.2.1 with ipfw + natd and mrouted. ... problem is the firewall. ...
      (freebsd-stable)
    • Windows Client -> FreeBSD + racoon VPN server
      ... connect a Windows XP client to a VPN server running FreeBSD 4.8 and racoon ... Now the client connects to our IPFilter ... Exchange server through the tunnel (I can watch both the ESP and ISAKMP ...
      (comp.security.unix)
    • Re: Maraudon Princess and Tinkerer
      ... > head piece was only worth 1g, Im guessing he wanted to show us how to make ... also there seems to be quite a few small brilliant shards on ... > my server from the same people in stacks or single who must be using this ... > Its obviously recent as it has a buyback tab when he goes to vendor, ...
      (alt.games.warcraft)