i was in the process of reading my syslog and noted some suspicious lines in there,there was possibly an attack of my box via telnet,i wanted to know more so i did: grep telnetd /var/log/daemon.log and got these result:
Apr 3 02:10:30 main in.telnetd[374]: connect from ppp-annex-0454.mtl.total.net Apr 3 02:10:35 main telnetd[374]: ttloop: peer died: Success Apr 4 23:25:41 main in.telnetd[243]: connect from ppp154.207.mmtl.videotron.netApr 4 23:43:35 main telnetd[243]: ttloop: peer died: Success Apr 4 23:47:53 main in.telnetd[248]: connect from ppp154.207.mmtl.videotron.netApr 4 23:49:43 main telnetd[248]: ttloop: peer died: Success Apr 5 00:23:46 main in.telnetd[260]: connect from ppp154.207.mmtl.videotron.netApr 5 00:24:01 main telnetd[260]: ttloop: peer died: Success Apr 7 00:53:07 main in.telnetd[816]: connect from host-209-138-8-98.bhm.BELLSOUTH.net Apr 7 00:53:08 main telnetd[816]: ttloop: peer died: Success Apr 7 00:59:31 main in.telnetd[820]: connect from host-209-138-8-98.bhm.BELLSOUTH.net Apr 7 00:59:42 main telnetd[820]: ttloop: peer died: Success Apr 11 21:18:37 main in.telnetd[287]: connect from ppp-51x2-0105.que.total.net Apr 11 21:18:38 main telnetd[287]: ttloop: peer died: Success Apr 13 01:15:01 main in.telnetd[242]: connect from ppp117.223.mmtl.videotron.netApr 13 01:15:22 main telnetd[242]: ttloop: peer died: Success Apr 13 04:31:43 main in.telnetd[382]: connect from ts1-15.f127.quebectel.com Apr 13 04:38:15 main telnetd[382]: ttloop: peer died: Success anyone know what's this and where to look for security advices and the likes (i dont know anymore where to start) ??? thanks a lot !! Alain -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]