5 Feb
2006
5 Feb
'06
8:51 a.m.
It looks like my CentOS 4.2 box is attacking other people with some type of ftp attack. I got an email from somebody saying they were being attacked by my IP address.
Further investigation /var/log/messages shows a whole bunch of sshd attacks on me, none of which appear successful. I'm running ethereal right now and I can see that my system is doing some kind of ftp attacks on others.
I've think I've stopped the outgoing attacks at my firewall, but how do I proceed from here?
Thanks, James