Re: Security problems, I think I have a hacker attacker.
* Christopher Joyner <[EMAIL PROTECTED]> [26.08.2008 08:35]: > I think someone is attempting to get into my system. > Here is my details: There are 2 login failuers on ttyv0, > And also 2 login failers on ttyv0 root. Man, you typed in a wrong password. :) -- Dipl.-Theol. Martin Moeller http://martinmoeller.net - ICQ: 82221572 GnuPG DSA key 0x2A89AE36 - Jabber: [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Security problems, I think I have a hacker attacker.
On Sun, 24 Aug 2008 07:39:30 +, "Christopher Joyner" <[EMAIL PROTECTED]> wrote: > I think someone is attempting to get into my system. > > Here is my details: There are 2 login failuers on ttyv0, > And also 2 login failers on ttyv0 root. > > I did not try login in on that terminal. Are they able to try to do it away > from my computer, from a remote location? As far as I know, /dev/ttyv* are the local virtual consoles. SSH login attempts would be on /dev/ttyp*. So if you're sure it's on ttyv0, this is your system / primary console (first virtual console) which needs physical access to be used. But I'm sure there would be a strange way to pass something from or to /dev/ttyv0 using... redirection maybe? Are you sure that nobody tried to use your computer physically? > Can someone tell me how to turn off the broadcast option for my lan, if it's > possible. I think a server named chill is attacking me. Where did you get this evidence from? Check /var/log/auth.log and /var/log/xfer.log and /var/log/ftpd.log (if you're running FTP services). -- Polytropon >From Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Security problems, I think I have a hacker attacker.
Christopher Joyner wrote: I think someone is attempting to get into my system. Here is my details: There are 2 login failuers on ttyv0, And also 2 login failers on ttyv0 root. I did not try login in on that terminal. Are they able to try to do it away from my computer, from a remote location? Can someone tell me how to turn off the broadcast option for my lan, if it's possible. I think a server named chill is attacking me. cat /var/log/auth.log ? --per ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
