Date: Thu, 14 Nov 96 15:47:56 From: "Frode Nordahl" <froden@bigblue.no> To: "questions@freebsd.org" <questions@freebsd.org> Subject: Hackers? Message-ID: <199611141447.PAA02691@login.bigblue.no>
next in thread | raw e-mail | index | archive | help
Last night, one of our FreeBSD 2.1.5 machines rebooted. There is no entry of it in the messages file, but the lastlog says this xxx ttyp0 xxxx Thu Nov 14 02:11 - 02:13 (00:01) reboot ~ Thu Nov 14 02:01 xxxx ttyp7 xxxxxxxxx Thu Nov 14 00:36 - 00:44 (00:07) (Usernames and hostnames of the entry above/under are scratched out...) As you can see, no one was logged on at the time. The messages file has noe entries of the activity other than the kernel startupmessages. Can a FreeBSD box do this of itself if it gets into trouble? Memory fault, disk fault or something like that? Or do we have reason to believe this is hacker activity? In any case, what should we do??
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199611141447.PAA02691>