Re: [cobalt-users] Top command results

["Worldwide Beauty Store Staff" <email@xxxxxxxxxxxxxxxxx>]

You wrote:
> How can I check if someone has tried to login to my box (to hack)?
> I'm the only authorized user

FakePHF  (free script)
Description: This script allows you to catch "dumb-smart" guys who try to
crack your system and get /etc/passwd or any other important file. It
reports a "404 Not Found" message while mails the administrator information
about the attempt such as IP Address, Host Name, Query String and finally
date and time of the attempt.
http://www.hotscripts.com/cgi-bin/jump.cgi?ID=2106
----- Original Message -----
From: "Alonso Garcia" <alonsog@xxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Thursday, August 10, 2000 5:28 PM
Subject: RE: [cobalt-users] Top command results


> Thanks, I'm new to linux and thougt that somebody was logged in as root.
> How can I check if someone has tried to login to my box (to hack)?
> I'm the only authorized user
>
>
> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Steven Werby
> Sent: Thursday, August 10, 2000 5:38 PM
> To: Cobalt Users List
> Subject: Re: [cobalt-users] Top command results
>
>
> Yes.
>
> --
> Steven Werby {steven-lists@xxxxxxxxxxxx}
>
> On Thu, 10 Aug 2000, Alonso Garcia wrote:
>
> > When you run top as admin is it normal to see all this:
> >
> > 13031 admin     13   0  1012 1012   836 R       0  0.5  0.6   0:03 top
> > 13007 root       3   0   860  860   684 S       0  0.1  0.5   0:00
> > in.telnetd
> >     1 root       0   0   100   52    36 S       0  0.0  0.0   0:05 init
> >     2 root       0   0     0    0     0 SW      0  0.0  0.0   0:00
kflushd
> >     3 root       0   0     0    0     0 SW      0  0.0  0.0   0:03
kupdate
> >     4 root       0   0     0    0     0 SW      0  0.0  0.0   0:00 kpiod
> >     5 root       0   0     0    0     0 SW      0  0.0  0.0   0:00
kswapd
> >     6 root     -20 -20     0    0     0 SW<     0  0.0  0.0   0:00
> > mdrecoveryd
> >   676 root       0   0   404  380   280 S       0  0.0  0.2   4:35
syslogd
> >   685 root       0   0   384    0     0 SW      0  0.0  0.0   0:00 klogd
> >   723 root       0   0   164  112    76 S       0  0.0  0.0   0:00 crond
> >   764 root       0   0  1444 1016   548 S       0  0.0  0.6   1:02 named
> >   773 root       0   0  3140  100    76 S       0  0.0  0.0   0:00 httpd
> >   808 postgres   0   0  1664  832   356 S       0  0.0  0.5   0:27
> > postmaster
> >   834 root       0   0  4332 2468  2204 S       0  0.0  1.5   0:08 httpd
> >   890 root       2   0    88   56    36 S       0  0.0  0.0   0:10
> lcdsleep
> >   927 root       0   0    96    0     0 SW      0  0.0  0.0   0:00
mgetty
>
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>