The NIC is innocent, there is no dust, memtest86 finds nothing wrong,
but working through the logs I the first incidence of the error
(triggered by cron) after about 5 days of my absence. Minutes before the
error there was a successful login for user test, via ssh. The logs show
lots of failed attempts to log on via ssh for users such as test,
guest, root, user. Googling leads to a lot of inconclusive talk about
scanning, with the suggestion that it is guessing weak passwords. I am
fighting a losing battle with myself, trying to deny that I left user
test with a remarkably silly password.
find tells me that /sbin/init was changed, and /usr/lib/.ss/sk was
installed. SuckIT? The machine is now offline, and I am using to
opportunity to play with Thunderbird on an adjacent windows box.
What fun!
Brendan
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
