Re: Help needed - server hacked twice in three days (and I don't think I'm a newbie)
Goswin von Brederlow <email@example.com> writes:
> Karsten Dambekalns <Karsten@k-fish.de> writes:
>> On Thursday 21 July 2005 20:31, Andras Got wrote:
>>> The users, the ones the machines was hacked, were they existing users on
>>> the machine?
>> I don't know which user account got hacked, if this was what has happened.
> Did you check the last lock? Maybe the attacker didn't remove the
> traces there.
last log obviously. :)