Linux

Ask something
Discussion Locked

Someone broke into my system!

0 helpful
5 replies

by stahler1 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am running Red Hat 7.0(looking at upgrading to 7.2). Everything is being blocked by a firewall but FINGER and my WWW ports. Someone keeps on going in trying to install stuff on my machine. Is there a way I can see who this is or just see how heis getting in?

I am running Apache 1.3 with PostgreSql 6.5.

5 replies

by brianaaa12

netstat will show all connections. Install Port Sentry and IP Tables. Port Sentry automatically blocks people trying to get in. It also records their IP address in a log file.

by skizz

Check the auto-update function isn't running.
/usr/bin/up2date-config to check settings.

This discussion is closed to new replies.