[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Hack attempt

To: focus-linux@securityfocus.com
Subject: Re: Hack attempt
From: "Eric Paynter" <eric@arcticbears.com>
Date: Fri, 23 Jul 2004 14:11:16 -0700 (PDT)
Delivered-to: shane@homeo.stud.ntnu.no
Delivered-to: mailing list focus-linux@securityfocus.com
Delivered-to: moderator for focus-linux@securityfocus.com
Importance: Normal
In-reply-to: <20040721170230.3e78829b.norbert.crettol@idiap.ch>
List-help: <mailto:focus-linux-help@securityfocus.com>
List-id: <focus-linux.list-id.securityfocus.com>
List-post: <mailto:focus-linux@securityfocus.com>
List-subscribe: <mailto:focus-linux-subscribe@securityfocus.com>
List-unsubscribe: <mailto:focus-linux-unsubscribe@securityfocus.com>
Mailing-list: contact focus-linux-help@securityfocus.com; run by ezmlm
References: <20040721170230.3e78829b.norbert.crettol@idiap.ch>
User-agent: SquirrelMail/1.4.3a

On Wed, July 21, 2004 8:02 am, Norbert Crettol said:
>         14 jui 21 16:27 eggdrop -> eggdrop-1.6.10*
>    2523568 mai 12  2002 eggdrop-1.6.10*

Looks like an irc bot. Check the bot configs to see what channel it is on.
Go to that channel and idle. Hackers love to brag. You just might find out
some interesting things, maybe even about many other bots they have in
their network. Then you can notify those system admins and maybe they will
clean up some of the mess...

Or, if you don't have time to save the world, just format and re-install.
Next time, secure your box.

-Eric

--
arctic bears - email and dns services
http://www.arcticbears.com

References:
- Hack attempt
  - From: Norbert Crettol <norbert.crettol@idiap.ch>

Prev by Date: Re: Hack attempt
Next by Date: Re: Hack attempt
Previous by thread: Re: Hack attempt
Next by thread: Re: Hack attempt
Index(es):
- Date
- Thread