Date: Tue, 05 Feb 2002 12:54:41 -0700 From: Brett Glass <brett@lariat.org> To: Victor Grey <victor@customdynamic.net>, <freebsd-security@FreeBSD.ORG> Subject: Re: Is this evidence of a break-in attempt? Message-ID: <4.3.2.7.2.20020205125336.02758450@localhost> In-Reply-To: <B8855B65.70FE%victor@customdynamic.net>
next in thread | previous in thread | raw e-mail | index | archive | help
In a word, yes. Looks like they went to the box with a keyboard and a mouse, rebooted, and tried to log in. Clearly, they were so clueless that they did not know about single-user mode. --Brett At 10:50 AM 2/5/2002, Victor Grey wrote: ----------------------------- >Feb 3 23:56:20 p2 syslogd: exiting on signal 15 ><snip> >Feb 3 23:58:59 p2 /kernel: FreeBSD 4.4-RELEASE-p2 #0: Wed Dec 26 12:01:30 >PST 2001 ><snip> >Feb 3 23:59:00 p2 /kernel: psm0: <PS/2 Mouse> irq 12 on atkbdc0 >Feb 3 23:59:00 p2 /kernel: psm0: model Generic PS/2 mouse, device ID 0 ><snip> >Feb 4 00:43:38 p2 login: 3 LOGIN FAILURES ON ttyv0 >Feb 4 00:43:38 p2 login: 3 LOGIN FAILURES ON ttyv0, root >----------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20020205125336.02758450>