On Wed, Sep 24, 2008 at 11:00 AM, roland <roland@xxxxxx> wrote: >> > I was not clear enough, > I did changed the password for root and I blocked remote root login. > Now he is still trying to login with root, but unsuccessfully. So probably > he did not finished his job. > > roland It was not clear to me whether you or the attacker had changed the root password. This guy's got your number and will keep coming. I would have pull the plug on that system long ago. There's nothing else really to do about this. I wish you luck with that system. ~af -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines