From: "Sundaram Ramasamy" <sun@percipia.com>
To: netfilter@lists.netfilter.org
Subject: some body hacked my system
Date: Tue, 8 Oct 2002 11:07:37 -0400 [thread overview]
Message-ID: <001e01c26edc$73aca530$8c01a8c0@sundaram> (raw)
[-- Attachment #1: Type: text/plain, Size: 933 bytes --]
Hi,
I am allowing ftp connection in my firewall, some body used ftp port, filled
my hard disk space. He logged-in from 68.65.58.159 IP (/var/log/message)
Oct 8 00:57:03 linux2 ftpd[25101]: FTP LOGIN FROM
va-staff-u1-c5a-159.frbgva.adelphia.net [68.65.58.159]
he created directory named WC3 and transfed follwoing files.
bash-2.04# cd WC3
bash-2.04# ls
wc3.part01.rar.gz wc3.part07.rar.gz wc3.part13.rar.gz wc3.part19.rar.gz
wc3.part02.rar.gz wc3.part08.rar.gz wc3.part14.rar.gz wc3.part20.rar.gz
wc3.part03.rar.gz wc3.part09.rar.gz wc3.part15.rar.gz wc3.part21.rar.gz
wc3.part04.rar.gz wc3.part10.rar.gz wc3.part16.rar.gz
wc3.part05.rar.gz wc3.part11.rar.gz wc3.part17.rar.gz
wc3.part06.rar.gz wc3.part12.rar.gz wc3.part18.rar.gz
Is anybody knows what this file used for?
How will i block this IP Address in my firewall?
How will i check what else he did on my machine?
Thanks
SR
[-- Attachment #2: Type: text/html, Size: 1453 bytes --]
next reply other threads:[~2002-10-08 15:07 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-10-08 15:07 Sundaram Ramasamy [this message]
2002-10-08 15:24 ` some body hacked my system Vito Louis Sansevero
2002-10-08 15:41 ` Carlos E Gorges
2002-10-08 18:36 ` Michael H. Warfield
2002-10-08 20:01 ` Maciej Soltysiak
2002-10-08 21:12 ` Kevin Dwyer
2002-10-08 21:53 ` Sundaram Ramasamy
2002-10-09 18:26 ` Michael H. Warfield
-- strict thread matches above, loose matches on Subject: below --
2002-10-08 15:17 Keith R. Weiner
2002-10-08 22:07 ` Bob Sully
2002-10-08 17:17 Dominic Irrcher
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='001e01c26edc$73aca530$8c01a8c0@sundaram' \
--to=sun@percipia.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox