Interesting Hack

We had a spare machine runnig redhat 7.2 get hacked by something.hispeed.ch

The machine is having an odd problem now, can anyone recognize it. (We will be removing the HD to study and putting in a fresh one shortly)

The machine goes online and offline for a few hours at a time at random times. The machine isnt frozen, but you cant ping it from an outside network. BUT once a machine on the same network pings the machine, it comes online to everyone....
hm....

I know the user ftp'd in, unfortunately we didnt have logging enabled. I just did today. Im leaving the system up to track him. md5 checksums show none of the main binaries are compromised....

Does anyone know any known hack that will affect the network access as described above?

Thanks

 

 

 

 

Top