Closed

Linux Server Technician - Server Compromised

This project was awarded to yunusyb for $45 USD.

Get free quotes for a project like this
Employer working
Awarded to:
Project Budget
$30-$250 USD
Total Bids
32
Project Description

I have had my Linux dedicated server compromised and my hosting company said i must investigate. They have given some suggestions but i need a server specialist to work on this. If i find the right person i will always use you to maintain the server as ongoing.

I need to find out what happened on my server and how it happened so i can prevent it in future. The host said lucky it was at user level but couldn't tell me what user it was under.

I need to do this asap so please let me know when you can start and after i check all your details i will give the password details.

This is what i got from hosting company

====================================================

Thanks for your time on this phone this morning. As discussed, you are going to have one of your technicians take a look at your server and the current compromise.

As mentioned, you can find some information in files in the directory specified in this ticket and also the /root/tmp directory and /tmp directory. Please note that if the compromise is detected as running again, to protect the integrity of the network, we will need to stop your server until you are able to take immediate action to prevent the compromise from running again.


We believe that your server has been compromised. One of our techician will give you a call shortly to discuss.

The suspicous files are located on:

/tmp/[url removed, login to view]
/var/tmp/[url removed, login to view]
/var/tmp/[url removed, login to view]
/var/tmp/fl.jpg.3
/var/tmp/fl.jpg.4
/var/tmp/fl.jpg.6
/var/tmp/[url removed, login to view]
/var/tmp/fl.jpg.9
/var/tmp/fl.jpg.8
/var/tmp/[url removed, login to view]
/var/tmp/[url removed, login to view]
/var/tmp/[url removed, login to view]
/var/tmp/[url removed, login to view]
/var/tmp/[url removed, login to view]
/var/tmp/[url removed, login to view]
/var/tmp/fl.jpg.7
/var/tmp/[url removed, login to view]
/var/tmp/fl.jpg.5
/var/tmp/fl.jpg.1
/var/tmp/[url removed, login to view]
/var/tmp/[url removed, login to view]
/var/tmp/[url removed, login to view]
/var/tmp/[url removed, login to view]
/var/tmp/fl.jpg.2
/var/tmp/[url removed, login to view]

Please investigate this further.

Looking to make some money?

  • Set your budget and the timeframe
  • Outline your proposal
  • Get paid for your work

Hire Freelancers who also bid on this project

    • Forbes
    • The New York Times
    • Time
    • Wall Street Journal
    • Times Online