someone uploaded a public/private keypair to my server today

Discussion in 'Security' started by jmpf, Nov 23, 2009.

  1. #1
    Very weird....

    Someone uploaded a public/private keypair to my server today through a file upload form. I don't know what they thought they were trying to do but it didn't look like a bot as I looked at the activity from the ip in my log files and it seemed to be fairly 'user-made'.

    They weren't any of my keys and I'm fairly confident that I haven't been rooted or anything.

    Wondering if anyone has heard/seen activity like this? Could it have been an honest mistake? I know the user on my site who did it but not even sure what to ask him about.

    "So, did you leave you public/private keys on my bulk upload form? Why? You might want to change them now."

    I seriously don't have a clue.... wtf!?
     
    jmpf, Nov 23, 2009 IP