09-26-2003
207,
1
Join Date: Jul 2003
Last Activity: 23 February 2004, 11:09 AM EST
Location: Holland
Posts: 207
Thanks Given: 0
Thanked 1 Time in 1 Post
Ahum,
I think you already told us which ports. remsh and rlogin where being reported, right?
grep login /etc/services
netstat -a
should show you the current (idle) connections to your server. Maybe you can get some extra info from here.
lastb should tell you the last failed logins and "last -R" should tell you the succeeded logins inclusive host-name/ipadress.
Regs david