New Web Hack?

From: incidents.nospam13@web-cities.net
Date: 01/24/03

  • Next message: Ryan Yagatich: "RE: Hacked web server" 
    From: <incidents.nospam13@web-cities.net>
To: <incidents@securityfocus.com>
Date: Fri, 24 Jan 2003 09:30:07 -0800

    All,

        One of our servers was defaced the other day. I am trying to find out
    details on this particular hack but cannot find anything!? Is this
    something new?
    Logs are wiped and I can't find any trojaned files.

    Link to the site:
    http://www.geocities.com/kali3986

    Link to the log of processes:
    http://www.geocities.com/kali3986/tdi_info.LOG

    Anyone seen this before???

    Regards,
    Dr. B.

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com

    Relevant Pages

    • Re: Hack attempt
      ... > I want to show everyone some logs and see if you know the hack they are ... > I supected something when apache was not running this morning. ... You have an error in your config file... ...
      (comp.os.linux.security)
    • Re: Attempted SSH Logins
      ... Ive had a company trying to hack my home system from Paris. ... I then got on to their website, found the webmaster email account and sent ... >>I have been monitoring our logs over the past several weeks using logwatch ... New and Improved Yahoo! ...
      (RedHat)
    • Re: Chinese Hackers
      ... >> I was wondering if the Chinese get a bonus for every decadent western PC ... >> they manage to hack. ... >> I was just checking my logs and its mainly bloody chinese gits attempting ...
      (uk.legal)
    • Re: Suse Logfiles
      ... Du das Knowhow hast, den Hack zu erkennen und die ... richtigen Maßnahmen zu ergreifen, wenn Du die Logs nicht selbst finden ... Ist nicht bös gemeint, und es schadet bestimmt nicht, die Logs ...
      (de.comp.os.unix.linux.misc)
    • RE: hack attempt on my server...What do you do about this?
      ... information (what logs). ... hack attempt on my server...What do you do about this? ... double-click on 'Blocked Hosts' and enter the ip. ... To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list -- ...
      (Fedora)