24 Sep
2008
24 Sep
'08
1:24 p.m.
On Wed, Sep 24, 2008 at 11:00 AM, roland roland@cat.be wrote:
I was not clear enough, I did changed the password for root and I blocked remote root login. Now he is still trying to login with root, but unsuccessfully. So probably he did not finished his job.
roland
It was not clear to me whether you or the attacker had changed the root password. This guy's got your number and will keep coming. I would have pull the plug on that system long ago. There's nothing else really to do about this. I wish you luck with that system.
~af