From owner-freebsd-questions Sat Feb 20 12:16:13 1999 Delivered-To: freebsd-questions@freebsd.org Received: from gamma.aei.ca (unknown [206.123.6.10]) by hub.freebsd.org (Postfix) with ESMTP id 49533119CC for ; Sat, 20 Feb 1999 12:12:26 -0800 (PST) (envelope-from malartre@aei.ca) Received: from aei.ca (ppp-111-111.mtl.aei.ca [207.107.111.111]) by gamma.aei.ca (8.8.5/8.8.5) with ESMTP id PAA01453; Sat, 20 Feb 1999 15:12:17 -0500 (EST) Message-ID: <36CF16EC.CD45E27@aei.ca> Date: Sat, 20 Feb 1999 15:11:24 -0500 From: Malartre X-Mailer: Mozilla 4.5 [en] (X11; I; FreeBSD 2.2.8-RELEASE i386) X-Accept-Language: fr, en, zh MIME-Version: 1.0 To: Patrick Seal Cc: freebsd-questions@FreeBSD.ORG Subject: Re: I've been hacked! References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Patrick Seal wrote: > > My daily security output email had the following: > Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu > Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu, root > > I checked the messeges log and found this: > Feb 19 11:30:55 foobar telnetd[73768]: warning: can't verify hostname: > gethostbyname(i.am.in.chaos.nu) failed > Feb 19 11:31:04 foobar login: LOGIN root REFUSED (NOROOT) FROM > i.am.in.chaos.nu ON TTY ttyp1 > Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu > Feb 19 11:31:18 foobar login: 2 LOGIN FAILURES FROM i.am.in.chaos.nu, root > Feb 19 18:41:19 foobar telnetd[95697]: warning: can't verify hostname: > gethostbyname(i.am.in.chaos.nu) failed > > What can i do? > > ------------------------------------ _____________________________________ > Patrick Seal |"Microsoft isn't evil, they just make > | really crappy operating systems." > Hyperhost - http://www.hyperhost.net| -Linus Torvalds > hosting and Design > > http://www.freebsd.org - http://www.linux.org > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message See also http://www.freebsd.org/~jkb/howto.html -- [Malartre][malartre@aei.ca][French piss me off - Cartman, South Park] [The FreeBSD User Guide][http://www.aei.ca/~malartre/freebsd/] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message