Date: Fri, 21 Aug 1998 22:14:28 -0400 (EDT) From: CyberPeasant <djv@bedford.net> To: vagner@mutsgo.kf7nn.com (Laszlo Vagner) Cc: questions@FreeBSD.ORG Subject: Re: wierd Message-ID: <199808220214.WAA05785@lucy.bedford.net> In-Reply-To: <199808212327.SAA05117@mutsgo.kf7nn.com> from Laszlo Vagner at "Aug 21, 98 06:27:21 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
Laszlo Vagner wrote:
> what could this be?
>
> i understand the first 2 failed attempts to login but
> a login from my own machine??? localhost? with 00's and not OO's
>
>
>
> Aug 20 23:04:28 mutsgo login: 1 LOGIN FAILURE FROM er4.rutgers.edu
> Aug 20 23:04:28 mutsgo login: 1 LOGIN FAILURE FROM er4.rutgers.edu, kk7ax
> Aug 20 23:10:37 mutsgo login: 2 LOGIN FAILURES FROM localhost
> Aug 20 23:10:37 mutsgo login: 2 LOGIN FAILURES FROM localhost, r00t
>
Somebody's messing with you.
I bet a script kid got in between 23:04 and 23:10, installed a bogus
root kit, and tried to login as r00t. This is a common h4x0r misspelling.
time for an audit.
Dave
--
Confutatis maledictis, flammis acribus addictis.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808220214.WAA05785>