From owner-freebsd-isp Sat Nov 24 12:43:59 2001 Delivered-To: freebsd-isp@freebsd.org Received: from bigglesworth.mail.be.easynet.net (bigglesworth.mail.be.easynet.net [212.100.160.67]) by hub.freebsd.org (Postfix) with ESMTP id 5036837B417 for ; Sat, 24 Nov 2001 12:39:57 -0800 (PST) Received: from 213-193-182-67.adsl.easynet.be ([213.193.182.67] helo=krijt.dyn.dhs.org) by bigglesworth.mail.be.easynet.net with esmtp (Exim 3.16 #1) id 167jaY-0004ib-00; Sat, 24 Nov 2001 21:39:50 +0100 Received: (from wim@localhost) by krijt.dyn.dhs.org (8.11.3/8.11.3) id fAOKgZg72093; Sat, 24 Nov 2001 21:42:35 +0100 (CET) (envelope-from wim) Date: Sat, 24 Nov 2001 21:42:35 +0100 From: Wim Livens To: "Bill A. K." Cc: freebsd-isp@freebsd.org Subject: Re: Attack on server, need help ASAP Message-ID: <20011124214234.A93399@krijt.livens.net> References: <000a01c1751e$b4fe5500$6501a8c0@bill> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <000a01c1751e$b4fe5500$6501a8c0@bill>; from billak@fox56.tv on Sat, Nov 24, 2001 at 02:32:07PM -0500 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Op za 24 nov, 2001 om 02:32:07pm -0500, schreef Bill A. K.: > My server was just attacked.........someone tried logging in telnet, and apparently shut down the telnet daemon from trying (over 400 times)....theres NOTHING in the logs, the ips were on the screen, but stupid me started typing stuff and now they're gone. Is there a way to get back what was on the screen, like a history of stdout? Please, someone help, asap, I would really appreciate it. If your screen is an xterm: If your screen is a console: , then -- Wim Livens mailto:wim@livens.net Krijtstraat 17 http://wim.livens.net 2600 Berchem tel: +32 478 88 26 18 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message