HELP: Attempted break-ins?

Article View: vmsnet.sysmgt

Article #77

#77

From: yqdx
Date: Fri, 18 Dec 1992 19:53

17 lines
1102 bytes

Hi-
  Lately, several users of our VAXStation 3200 have been reporting that
when they log in, it often says "one unsuccessful attempt since last
login."  It is not on every account, and it is not as distressing as if
it said "10000 failed attempts"  or whatever.  However, our computer's
address is not broadcast to the world, so we do not expect any random
"noise."
  It has happened enough that I am concerned.  Are there techniques for
logging the origin of attempted logins, and/or all logins in general?
I apologize if this is common knowledge, for I am still a novice system
administrator.  We are currently running VMS 5.3. Any help would be greatly
appreciated.
  Thanks in advance.

-Chris Bruns
Cornell Biochemistry Dept.
yqdx@vax5.cit.cornell.edu

Technical Details

Message-ID: <1992Dec18.145352.16583@vax5.cit.cornell.edu>

Path: arc1-ca.pugleaf.net!sparky!uunet!newsstand.cit.cornell.edu!vax5.cit.cornell.edu!yqdx

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!newsstand.cit.cornell.edu!vax5.cit.cornell.edu!yqdx
From: yqdx@vax5.cit.cornell.edu
Newsgroups: vmsnet.sysmgt
Subject: HELP: Attempted break-ins?
Message-ID: <1992Dec18.145352.16583@vax5.cit.cornell.edu>
Date: 18 Dec 92 14:53:52 EST
Distribution: vmsnet
Organization: Cornell University
Lines: 17