From owner-freebsd-questions Sat Feb 20 9:25:28 1999 Delivered-To: freebsd-questions@freebsd.org Received: from hyperhost.net (ether.lightrealm.com [207.159.132.5]) by hub.freebsd.org (Postfix) with ESMTP id 2DE1B10E7B for ; Sat, 20 Feb 1999 09:25:20 -0800 (PST) (envelope-from patseal@hyperhost.net) Received: from port3.annex8.radix.net (port3.annex8.radix.net [205.252.108.3]) by hyperhost.net (8.8.5/8.8.5) with ESMTP id MAA10519 for ; Sat, 20 Feb 1999 12:25:20 -0500 (EST) Date: Sat, 20 Feb 1999 12:25:15 -0500 (EST) From: Patrick Seal To: freebsd-questions@FreeBSD.ORG Subject: I've been hacked! Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG My daily security output email had the following: Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu, root I checked the messeges log and found this: Feb 19 11:30:55 foobar telnetd[73768]: warning: can't verify hostname: gethostbyname(i.am.in.chaos.nu) failed Feb 19 11:31:04 foobar login: LOGIN root REFUSED (NOROOT) FROM i.am.in.chaos.nu ON TTY ttyp1 Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu, root Feb 19 18:41:19 foobar telnetd[95697]: warning: can't verify hostname: gethostbyname(i.am.in.chaos.nu) failed What can i do? ------------------------------------ _____________________________________ Patrick Seal |"Microsoft isn't evil, they just make | really crappy operating systems." Hyperhost - http://www.hyperhost.net| -Linus Torvalds hosting and Design http://www.freebsd.org - http://www.linux.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message