[plug] Client listed on SORBS database

Jason Posavec jasonposavec at iinet.net.au
Wed Sep 30 18:50:01 WST 2009


Jon Miller wrote:
>
> I have a client that has gotten itself listed on the sorbs database as 
> a vulnerable / hacked server.
>
> Is there any test I can run to see if this is true. 
>
>  
>
> How do I get them off the list?  Their server is a Debian v4 with 
> postfix.  Is there anything I can look for with tshark or any other 
> analyser?
>
>  
>
>  
>
> Regards
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> PLUG discussion list: plug at plug.org.au
> http://www.plug.org.au/mailman/listinfo/plug
> Committee e-mail: committee at plug.linux.org.au
>   
Did you want to test if it's true that you're on the database, or that 
your server is hacked, or that your server is hackABLE?

Regarding the last one, something like running it through Shields Up at 
grc.com couldn't hurt to find out if you have any vulnerabilities. It's 
Windoze-centric, I know, but couldn't hurt.

Jason



More information about the plug mailing list