LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 09-19-2004, 07:53 PM   #1
phennon
LQ Newbie
 
Registered: Sep 2004
Distribution: Red Hat Enterprise Linux ver 3
Posts: 1

Rep: Reputation: 0
Angry SSH login attempts must have succeeded


OK. I'm a TOTAL newbie.

My machine has been compromised in this way. I use ssh to connect ot school and work from home, mostly to move data around.
Right now there's a server listening on port 22 (well actually I've unplugged the box from the wall so no one is actually listening...)

Where do I start????

Thanks in advance.

Paula
 
Old 09-19-2004, 07:58 PM   #2
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 57
What makes you think you've been compromised? Please provide as much detail as possible.

Note: I'm making this into it's own thread, since the original is more of an info thread rather than forensics.
 
Old 09-19-2004, 09:03 PM   #3
servnov
Member
 
Registered: Sep 2004
Distribution: Slackware 10.2
Posts: 276

Rep: Reputation: 30
your box, like most by unix/linux is running ssh on port 22. This is so you can connect to port 22 on your machine...this is a service for you--thus its a server. You can drop/reject connections to your machine in a firewall/router, turn it off, or delete it. You will still have the ssh client which allows you to connect to other ssh servers. I doubt you have been 'hacked'.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Compromised by SSH bruteforce MBH Linux - Security 3 09-16-2005 11:10 PM
SSH brute force.... compromised? heri0n Linux - Security 15 11-21-2004 06:51 PM
Ssh Compromised!!???help!!! Savedadogs Linux - Security 12 02-10-2004 01:48 AM
ftp login -- ssh no login waffe Linux - General 4 12-27-2003 01:42 AM
Ssh Compromised! Savedadogs Linux - General 1 04-28-2002 04:29 PM


All times are GMT -5. The time now is 04:07 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration