Have I been hacked?

Support and Troubleshooting
1

My node is taking forever to sync, something is wrong.
Today I open the logs and saw this in the logs:

Jan 22 01:31:51 umbrel passwd[12528]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 22 09:33:41 umbrel passwd[12646]: pam_unix(passwd:chauthtok): password changed for umbrel

I did not change the password, have I been hacked?

2

Same issue here! The blocks synchronize fine, but the wallets don’t! What’s going on? Any ideas?
Thanks.
FALSE ALARM! :blush: Thank goodness, I restarted my node and that’s solved!

1 Like
3

Maybe my mistake was to try to install some apps before the blockchain finished syncing…

4

I guess it more likely a hardware issue, causing files corruptions.
Did you restart system? No changes?
About hardware issues, most common bad quality power supply, bad quality USB cables or bad quality USB to SATA adaptor.

5

I think all users have the “password changed” in the logs.

This is what I have and I didn’t change the password since inception.

Maybe someone can explain it.

Jan 18 20:12:37 umbrel passwd[4870]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 19 07:37:37 umbrel passwd[18455]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 19 09:37:31 umbrel passwd[14995]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 19 10:37:26 umbrel passwd[17787]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 19 18:35:16 umbrel passwd[12787]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 19 21:15:08 umbrel passwd[1711]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 20 09:43:26 umbrel passwd[15167]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 20 21:03:01 umbrel passwd[31874]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 21 04:12:02 umbrel passwd[16851]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 21 06:19:34 umbrel passwd[24367]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 21 09:14:27 umbrel passwd[28596]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 21 10:29:48 umbrel passwd[6642]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 21 11:36:32 umbrel passwd[9790]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 21 13:19:38 umbrel passwd[1483]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 21 17:19:03 umbrel passwd[5631]: pam_unix(passwd:chauthtok): password changed for umbrel
Jan 21 20:23:04 umbrel passwd[15890]: pam_unix(passwd:chauthtok): password changed for umbrel

6

That may be the case, I got this HD from my old laptop and bought a cheap 2,5" usb3 case, maybe I should get a better one, the HD works fine with my laptop, but the rpi4 has its power limitations…

7

by the way, I was thinking of buying a SSD and have my HD for backups, can we make backups from the PC laptop used to access the umbrel server? I ask because I believe plugging a HD toghether with the SSD may cause power disruption on the rpi.

8

Umbrel is a server, it won´t work reliable (if work) without recomended parts or in mixed systems.