[plug] Am I Being Hacked?

[Earnshaw, Mike]

Mike,

I thought the same, but the times given are after hours and the room is
locked (I have one of the three keys, manager the other, cleaners master
probably and admin key (which should be locked away after hours)). Maybe the
cleaner .... we have no vermin that resemble cats (or feet warmers either
;-)

The three consecutive attempts are what threw me.

Mike


> -----Original Message-----
> From: Mike Holland [mailto:myk at golden.wattle.id.au]
> Sent: Tuesday, May 09, 2000 1:13 PM
> To: plug at plug.linux.org.au
> Subject: Re: [plug] Am I Being Hacked?
> 
> 
> On Tue, 9 May 2000, Christian wrote:
> 
> > > May  8 17:49:59 usswa login[14597]: FAILED LOGIN 1 FROM (null) FOR
> > > z.a^Z?toE~o^Pm%?^A^Ga^GLC, User not known to the 
> underlying authentication
> 
> > added risk.)  The fact that login is reporting that the 
> login attempt is
> > from "(null)" is really odd -- if it were a network access 
> attempt then
> > I would expect to see the address of the host there while a console
> > login would obviously give the terminal line.
> 
> On my redhat box, a console login give the '(null)' .
> Could it be line noise from a loose serial cable, or an elbow 
> brushing the
> keyboard ;-)   Maybe your cat.
> 
> 
> Mike Holland  <mike at golden.wattle.id.au>
>                           --==--
> antispam: rot 13 my email xor with the first 20 letters of 
> the king james bible and run crypt to mail me.
> 
> 
>