possible intrusion in my box ??????
i was in the process of reading my syslog and noted some suspicious lines
in there,there was possibly an attack of my box via telnet,i wanted to
know more so i did: grep telnetd /var/log/daemon.log and got these
result:
Apr 3 02:10:30 main in.telnetd[374]: connect from ppp-annex-0454.mtl.total.net
Apr 3 02:10:35 main telnetd[374]: ttloop: peer died: Success
Apr 4 23:25:41 main in.telnetd[243]: connect from ppp154.207.mmtl.videotron.netApr 4 23:43:35 main telnetd[243]: ttloop: peer died: Success
Apr 4 23:47:53 main in.telnetd[248]: connect from ppp154.207.mmtl.videotron.netApr 4 23:49:43 main telnetd[248]: ttloop: peer died: Success
Apr 5 00:23:46 main in.telnetd[260]: connect from ppp154.207.mmtl.videotron.netApr 5 00:24:01 main telnetd[260]: ttloop: peer died: Success
Apr 7 00:53:07 main in.telnetd[816]: connect from host-209-138-8-98.bhm.BELLSOUTH.net
Apr 7 00:53:08 main telnetd[816]: ttloop: peer died: Success
Apr 7 00:59:31 main in.telnetd[820]: connect from host-209-138-8-98.bhm.BELLSOUTH.net
Apr 7 00:59:42 main telnetd[820]: ttloop: peer died: Success
Apr 11 21:18:37 main in.telnetd[287]: connect from ppp-51x2-0105.que.total.net
Apr 11 21:18:38 main telnetd[287]: ttloop: peer died: Success
Apr 13 01:15:01 main in.telnetd[242]: connect from ppp117.223.mmtl.videotron.netApr 13 01:15:22 main telnetd[242]: ttloop: peer died: Success
Apr 13 04:31:43 main in.telnetd[382]: connect from ts1-15.f127.quebectel.com
Apr 13 04:38:15 main telnetd[382]: ttloop: peer died: Success
anyone know what's this and where to look for security advices and
the likes (i dont know anymore where to start) ???
thanks a lot !!
Alain
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: