On Monday 04 December 2000 10:48 am, you wrote:
> and much more =
More logs would be helpful to really determine if there was a break in,
however maybe the questions below can give you a place to start looking.
> Dec 3 23:20:15 linux inetd[17048]: connection from 200.176.106.246
> Dec 3:23:35:05
I have the followen lines in the messages log files this is malicius attack
?
Dec 3 23:20:15 linux inetd[17048]: connection from 200.176.106.246
Dec 3:23:35:05 linux PAM_pwdb[17124]: (su) session opened for user nobody
by (uid=99)
and much more =
Maximo Monsalvo
Guspamar S.A
Responsable Sistema
