RE: Is my system Hacked?

["Chitoor, Srikrishnan" <krishnan@xxxxxxxx>]

Do a "grep "Mar 25 23:20" /var/log/messages". You will see if the attempt
was successful. Also you might find what user he tried to log on as. You can
contact that user and asked him/her if they tried to log in that day.

Looking at it, one can only say that it is a probable attempt.

-Krishnan.

> -----Original Message-----
> From:	M K Saravanan [SMTP:mksarav@xxxxxxxxxxxxxxxxx]
> Sent:	Monday, April 17, 2000 3:26 PM
> To:	Indian Linux User Group - Chennai
> Subject:	Is my system Hacked?
> 
> hi,
> 
>   after attending this week ILUGC meeting, as krishnan said I checked the
> /var/log/secure file to find out suspicious login in my system.  For my
> surprise I
> found the following line:
> 
> Mar 25 23:20:53 aukbc3 in.telnetd[740]: connect from 199.224.86.36
> 
> Is this represent a hack attempt?  using nslookup i found this ip DN is
> thyme.epix.net.  Is it any possibility to find out the user who tried to
> telnet? 
> ********************************************************************
> M K Saravanan, 
> Design Engineer,
> The AU-KBC Centre for Internet & Telecom Technologies,
> Madras Institute of Technology, Anna University,
> Chrompet, Chennai 600 044.
> Tamilnadu, INDIA
> 
> email: mksarav@xxxxxxxxxxxxxxxxx
> 
> Ph & FAX (Off):  (091) (044) 2402711
> *******************************************************************
> 
> 
> 
> ---
> Send e-mail to 'ilugc-request@xxxxxxxxxxxxxxxxxx' with 'unsubscribe' 
> in either the subject or the body to unsubscribe from this list.
---
Send e-mail to 'ilugc-request@xxxxxxxxxxxxxxxxxx' with 'unsubscribe' 
in either the subject or the body to unsubscribe from this list.