JeffBeall
asked on
fedora
HELP!! - I'm not good at this - I have this entry in /var/spool/mail/root
users logging in through sshd:
root:
172.16.26.113 (itw-ws-0017.mydomain.com ) : 1 time
** unmatched entries **
warning /etc/hosts.allow line 14: missing ":" separator : 1 time (s)
address 172.16.26.113 maps to itw-ws-mydomain.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 1 time (s)
how can i see if this is a real possible break in? Also - is there a way to see who is logged in to 172.16.26.113 using the ip address?
users logging in through sshd:
root:
172.16.26.113 (itw-ws-0017.mydomain.com ) : 1 time
** unmatched entries **
warning /etc/hosts.allow line 14: missing ":" separator : 1 time (s)
address 172.16.26.113 maps to itw-ws-mydomain.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 1 time (s)
how can i see if this is a real possible break in? Also - is there a way to see who is logged in to 172.16.26.113 using the ip address?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER