Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 24 Jul 2002 23:09:04 -0400
From:      "sagacious" <sagacious@unixhideout.com>
To:        <freebsd-questions@freebsd.org>
Subject:   RE: Watching users
Message-ID:  <000001c23388$a1c00500$0a01a8c0@MIKESBOX>
In-Reply-To: <20020724204502.E92334-100000@ren.sasknow.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
>Hmm... So you want something that will simply just flip a switch and
let >you know if/when someone logs in or out. I won't ask why. :-)


My box got rooted the other day via that sshd exploit. He was defacing
my webpage and causing trouble. I didn't even know it. He started hiding
what he was doing so he could keep root. The funny thing is the only
reason I still have a box is because I was going on vacation so for the
hell of it I closed port 22 in my router. I locked him out without even
knowing it. I have people that need to login now that I'm back but I
need to see who and what from ips.. For all I know this tool downloaded
my master.passwd.
Thanks for your help.

sagacious (Mike)
Network administrator
The unixhideout network
http://www.unixhideout.com




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?000001c23388$a1c00500$0a01a8c0>