OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: ingreslock message
From: Jens Hektor (hektorRZ.RWTH-AACHEN.DE)
Date: Thu Mar 09 2000 - 23:53:17 CST

Hi,

> I logged this:
> Mar 5 15:58:23 monitor tcplogd: ingreslock connection
> attempt from sleipnir1.cs.ucl.ac.uk what does the
> ingreslock mean and what was this person trying to do?

reading this in the morning and starring later on the
logs of a cracked box I see the same adress in the wtmp
logs.

The machine had beside other trojans an inetd with
compiled-in backdoor at ingreslock.

Will inform the people at ucl.ac.uk about that.

Bye, Jens