Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 20 Feb 1999 12:25:15 -0500 (EST)
From:      Patrick Seal <patseal@hyperhost.net>
To:        freebsd-questions@FreeBSD.ORG
Subject:   I've been hacked!
Message-ID:  <Pine.BSF.4.05.9902201223010.51938-100000@foobar.hyperhost.net>

next in thread | raw e-mail | index | archive | help

My daily security output email had the following:
Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu
Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu, root

I checked the messeges log and found this:
Feb 19 11:30:55 foobar telnetd[73768]: warning: can't verify hostname:
gethostbyname(i.am.in.chaos.nu) failed
Feb 19 11:31:04 foobar login: LOGIN root REFUSED (NOROOT) FROM
i.am.in.chaos.nu ON TTY ttyp1
Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu
Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu, root
Feb 19 18:41:19 foobar telnetd[95697]: warning: can't verify hostname:
gethostbyname(i.am.in.chaos.nu) failed


What can i do?


------------------------------------ _____________________________________
Patrick Seal                        |"Microsoft isn't evil, they just make
<patseal@hyperhost.net>             |   really crappy operating systems."
Hyperhost - http://www.hyperhost.net| -Linus Torvalds
hosting and Design

http://www.freebsd.org - http://www.linux.org






To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9902201223010.51938-100000>