I am under IRC bouncer attack ??? HElp!!
Hello ,I think I am under IRC bouncer attack:
here a directory created on server in /var/tmp as:
root@hosting [/var/tmp]# ls
./ ../ ls/ mysql.sock@
root@hosting [/var/tmp]# cd ls
root@hosting [/var/tmp/ls]# ls
./ dynip.sh* iroffer.tar mybot.ignl.bkup mybot.xdcc README x.xdcc
../ iroffer* Makefile mybot.log mybot.xdcc.bkup sample.config
Configure* iroffer_chroot* Makefile.config mybot.log.2004-w28 mybot.xdcc.txt src/
COPYING iroffer.cron* mybot.ignl mybot.msg obj/ WHATSNEW
root@hosting #
I have shown the contents of that ls/ directory
Is it a backdoor ls command?
Any hint !!!!