Disk space

**chromate** · 12-19-2004, 09:57 AM

Have you never used DOS ? It's not that different.

**incka** · 12-22-2004, 05:28 AM

I've used dos prompt.....

Chromate, can you still do fix the problem for a fiver?

**chromate** · 12-22-2004, 05:31 AM

No, I'll do it for free. Wouldn't feel right charging for it. It's too easy

PM me with the server details.

**incka** · 12-22-2004, 08:46 AM

Infact, that Estonian guy is back now and has done it. He also updated my php at the same time, for free...

**MarkB** · 12-22-2004, 09:20 AM

Did you ask him to?

**incka** · 12-22-2004, 09:36 AM

Estonian guy, yeah, he was on my server upgrading all my forums for some reason, so I got him to do that at the same time.

**MarkB** · 12-22-2004, 09:58 AM

Wow, seems like a hell of a guy... :-|

**The New Guy** · 12-22-2004, 10:07 AM

Installing one hell of a backdoor

**MarkB** · 12-22-2004, 10:17 AM

I didn't want to say that

**incka** · 12-22-2004, 03:20 PM

I wouldn't trust him unless I knew a guy who owns a forum with over 2 million posts who uses him to do all the technical stuff for it...

**moonshield** · 12-22-2004, 04:38 PM

Speaking of upgrades... everybody has remebered to upgrade php right?

**incka** · 12-23-2004, 02:59 AM

My server provider have emailed me about unusual ssh to my server... Think it's just the drive changing and the upgrading of php?

**AndyH** · 12-23-2004, 04:04 AM

Originally Posted by incka

My server provider have emailed me about unusual ssh to my server... Think it's just the drive changing and the upgrading of php?

Paste the email they sent?

Upgrading PHP via SSH prompt is not classed as "unusual SSH" so no, no I don't think it would be.

What does "drive changing" mean?

**MarkB** · 12-23-2004, 04:56 AM

Very interesting... Perhaps they're concerned about an Estonian IP being logged for SSH access (he didn't log into SSH with root, did he? But su-ed once he was in there with a standard login?)

**incka** · 12-23-2004, 05:39 AM

Here is support ticket:

(awood-12/22/04-20:58):
We have received reports of unauthorized SSH access attempts coming from your server at 67.19.162.98. Please investigate and address this issue immediately. I have attached report.txt to this ticket for your review, which details the unauthorized traffic.

If you need assistance in this matter, please let us know. We are happy to help.

Please update us as soon as this has been resolved, thanks!
--------------------------------------
(c20321inck-12/23/04-03:49):I'm not very technical so I don't understand from report.txt what the problem is. Could you give me a simple description of the problem. I did recently get someone to do something in shell to stop one of my drives, hda2 or something, becoming full. Perhaps that is what happend, or perhaps it was when he updated PHP.
--------------------------------------
(c20321inck-12/23/04-06:32):I contacted the guy on msn messenger and this was what he said:

PHP-5.0.3 voila says:
nope
ok
it doesn't sem to be me
those login attempts are too close for me
and i laready had the right addresses and codes yesterday
--------------------------------------
(c20321inck-12/23/04-06:32)

oes this mean there is a security problem on my server?