From: | Bryan O'Shea <bryan05@××××××××.net> | ||
---|---|---|---|
To: | g1gsw@×××××××××.com | ||
Cc: | gentoo-security@l.g.o | ||
Subject: | Re: [gentoo-security] SSH login attempts and /var/log/wtmp | ||
Date: | Mon, 02 Aug 2004 23:19:04 | ||
Message-Id: | Pine.LNX.4.60.0408021851260.13235@malachi.totalink.net | ||
In Reply to: | Re: [gentoo-security] SSH login attempts and /var/log/wtmp by Colin Tinker |
1 | On Mon, 2 Aug 2004, Colin Tinker wrote: |
2 | > -- |
3 | > Have you run a rootkit scanner on this box? For example chkrootkit. |
4 | |
5 | When I first noticed the problem I shut the ethernet inteface down and |
6 | unplugged the box from the network. Ran chkrootkit and it didn't detect |
7 | anything unusual. I went over my logs and didn't notice anything odd only |
8 | except for my 'last' output. |
9 | |
10 | -- |
11 | gentoo-security@g.o mailing list |