Re: Help needed - server hacked twice in three days (and I don't think I'm a newbie)
Goswin von Brederlow <brederlo@informatik.uni-tuebingen.de> writes:
> Karsten Dambekalns <Karsten@k-fish.de> writes:
>
>> Hi.
>>
>> On Thursday 21 July 2005 20:31, Andras Got wrote:
>>> The users, the ones the machines was hacked, were they existing users on
>>> the machine?
>>
>> I don't know which user account got hacked, if this was what has happened.
>
> Did you check the last lock? Maybe the attacker didn't remove the
> traces there.
last log obviously. :)
MfG
Goswin
Reply to: