[Cialug] Attack troubleshooting?

L. V. Lammert lvl at omnitec.net
Mon Feb 28 22:23:05 CST 2011


Just had a Centos 5.5 box come under some sort of attack, .. it appeqrs
that there is something ON the box that was trying to connect to an
outside IP.

Any thoughts on how to isolate the cause? I finally got into the box by
playing with the firewall, but don't see any logins or anything untoward
in ps.

	Lee


More information about the Cialug mailing list