Prv8 Shell
Server : Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4
System : Linux server.jackjohnson.com 2.6.32-279.5.2.el6.x86_64 #1 SMP Fri Aug 24 01:07:11 UTC 2012 x86_64
User : jackjohn ( 502)
PHP Version : 5.3.17
Disable Function : NONE
Directory :  /home/jackjohn/mail/.jackjohnson@jackjohnson_com/cur/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/jackjohn/mail/.jackjohnson@jackjohnson_com/cur/1349317088.000156.mbox:2,
Return-Path: <root@jackjohnson.nethosting.com>
Received: from jackjohnson.nethosting.com ([127.0.0.17])
	by jackjohnson.nethosting.com (8.13.6.20060614/8.13.6) with ESMTP id l2T9CwSc048931
	for <root@jackjohnson.nethosting.com>; Thu, 29 Mar 2007 02:12:58 -0700 (MST)
Received: (from root@localhost)
	by jackjohnson.nethosting.com (8.13.6.20060614/8.13.6/Submit) id l2T9CvtT048861
	for root; Thu, 29 Mar 2007 03:12:57 -0600 (MDT)
Date: Thu, 29 Mar 2007 03:12:57 -0600 (MDT)
From: Charlie Root <root@jackjohnson.nethosting.com>
Message-Id: <200703290912.l2T9CvtT048861@jackjohnson.nethosting.com>
To: root@jackjohnson.nethosting.com
Subject: jackjohnson.nethosting.com security run output


Checking setuid files and devices:

jackjohnson.nethosting.com setuid diffs:
--- /var/log/setuid.today	Thu Mar 15 03:06:05 2007
+++ /tmp/security.eHSbYm6j	Thu Mar 29 03:12:55 2007
@@ -14,7 +14,7 @@
 124373523 -r-sr-xr-x  1 root  wheel      22528 Nov 18 08:57:07 2005 /skel/sbin/ping
 124373524 -r-sr-xr-x  1 root  wheel      30696 Sep 20 14:15:21 2006 /skel/sbin/ping6
 124373528 -r-sr-x---  1 root  operator   10820 Nov 18 09:10:30 2005 /skel/sbin/shutdown
-124377678 -rws--x--x  1 root  wheel     261244 Dec 11 14:11:33 2006 /skel/usr/X11R6/bin/xterm
+124377663 -rws--x--x  1 root  wheel     264800 Mar  5 10:49:50 2007 /skel/usr/X11R6/bin/xterm
 124394752 -r-sr-xr-x  4 root  wheel      20948 Nov  3 01:11:16 2005 /skel/usr/bin/at
 124394752 -r-sr-xr-x  4 root  wheel   20948 Nov  3 01:11:16 2005 /skel/usr/bin/atq
 124394752 -r-sr-xr-x  4 root  wheel   20948 Nov  3 01:11:16 2005 /skel/usr/bin/atrm
@@ -47,7 +47,7 @@
 124619146 -r-xr-sr-x  1 root  smmsp  588052 Nov 10 11:40:11 2005 /skel/usr/libexec/sendmail/sendmail-8.13.4
 124619149 -rws--x--x  1 root  wheel  141692 Nov 13 09:16:08 2006 /skel/usr/libexec/ssh-keysign
 124630292 -rws--x--x  1 root  wheel   10920 Jul 31 16:55:46 2006 /skel/usr/local/apache/bin/suexec
-124641832 -rwsr-xr-x  1 root  wheel   14993 Aug  1 08:31:47 2006 /skel/usr/local/apache2/bin/suexec
+124641831 -rwsr-xr-x  1 root  wheel   19380 Feb 28 13:55:07 2007 /skel/usr/local/apache2/bin/suexec
 124664343 -r-sr-xr-x  1 man   wheel   33152 Nov  2 12:34:29 2006 /skel/usr/local/bin/jman
 124664368 -rwxr-sr-x  1 root  mail    12784 Nov 17 18:17:16 2005 /skel/usr/local/bin/lockfile
 124664413 -rwxr-sr-x  1 root  mail     7668 Jan  3 09:10:32 2007 /skel/usr/local/bin/muttng_dotlock
@@ -61,7 +61,7 @@
 125401144 -r-xr-sr-x  1 root  daemon   43112 Nov  3 01:11:47 2005 /skel/usr/sbin/lpc
 125401191 -r-sr-xr-x  1 root  wheel    23264 Nov 18 08:56:11 2005 /skel/usr/sbin/traceroute
 125401192 -r-sr-xr-x  1 root  wheel    16916 Nov 18 08:56:18 2005 /skel/usr/sbin/traceroute6
-124377678 -rws--x--x  1 root  wheel     261244 Dec 11 14:11:33 2006 /usr/X11R6/bin/xterm
+124377663 -rws--x--x  1 root  wheel     264800 Mar  5 10:49:50 2007 /usr/X11R6/bin/xterm
 124394752 -r-sr-xr-x  4 root  wheel      20948 Nov  3 01:11:16 2005 /usr/bin/at
 124394752 -r-sr-xr-x  4 root  wheel   20948 Nov  3 01:11:16 2005 /usr/bin/atq
 124394752 -r-sr-xr-x  4 root  wheel   20948 Nov  3 01:11:16 2005 /usr/bin/atrm
@@ -94,7 +94,7 @@
 124619146 -r-xr-sr-x  1 root  smmsp  588052 Nov 10 11:40:11 2005 /usr/libexec/sendmail/sendmail-8.13.4
 124619149 -rws--x--x  1 root  wheel  141692 Nov 13 09:16:08 2006 /usr/libexec/ssh-keysign
 124630292 -rws--x--x  1 root  wheel   10920 Jul 31 16:55:46 2006 /usr/local/apache/bin/suexec
-124641832 -rwsr-xr-x  1 root  wheel   14993 Aug  1 08:31:47 2006 /usr/local/apache2/bin/suexec
+124641831 -rwsr-xr-x  1 root  wheel   19380 Feb 28 13:55:07 2007 /usr/local/apache2/bin/suexec
 124664343 -r-sr-xr-x  1 man   wheel   33152 Nov  2 12:34:29 2006 /usr/local/bin/jman
 124664368 -rwxr-sr-x  1 root  mail    12784 Nov 17 18:17:16 2005 /usr/local/bin/lockfile
 124664413 -rwxr-sr-x  1 root  mail      7668 Jan  3 09:10:32 2007 /usr/local/bin/muttng_dotlock

Checking for uids of 0:
root 0
toor 0

Checking for passwordless accounts:

jackjohnson.nethosting.com login failures:
Mar 28 21:05:03 jackjohnson sshd[79101]: Failed password for root from 203.91.120.141 port 51680 ssh2

jackjohnson.nethosting.com refused connections:

-- End of security output --


haha - 2025