HELP!! - I'm not good at this - I have this entry in /var/spool/mail/root
users logging in through sshd:
172.16.26.113 (itw-ws-0017.mydomain.com ) : 1 time
** unmatched entries **
warning /etc/hosts.allow line 14: missing ":" separator : 1 time (s)
address 172.16.26.113 maps to itw-ws-mydomain.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 1 time (s)
how can i see if this is a real possible break in? Also - is there a way to see who is logged in to 172.16.26.113 using the ip address?