Nezvany host (attack)

[Cyril Fischer]

Ahoj, objevilo se mi v logu
Mar  1 02:34:22 fischerc rpc.statd[350]: gethostbyname error for
^X÷˙ż^X÷˙ż^Y÷˙ż
^Y÷˙ż^Z÷˙ż^Z÷˙ż^[÷˙ż^[÷˙żbffff750 8049710
8052c18687465676274736f6d616e797265206
520726f7220726f66
.... (kraceno)
<90><90><90><90><90><90><90><90> ....
Mar  1 02:35:35 fischerc PAM_pwdb[23454]: password for (operator/11)
changed by ((null)/0)
Mar  1 02:36:12 fischerc adduser[23456]: new user: name=cgi, uid=0,
gid=0, home=/home/cgi, shell=/bin/bash
Mar  1 02:36:24 fischerc PAM_pwdb[23457]: password for (cgi/0) changed
by ((null)/0)
Mar  1 02:59:11 fischerc pumpd[281]: renewed lease for interface eth0

a objevili se novi uzivatele "operator" a "cgi"

Da se nejak poznat, kudy se sem dostal?

Dekuji, Cyril