As the log files tells you, the user is trying userid Admin. Check if
this ID exists on ur unix box.

To get a list of IP's and stuff from where people login using telnet or
any other protocol, ask ur sysadmin on unix to log all activity. ( sysad
can restrict users via inetd.sec file )

Some of the commands which might help you -

last -R , lastb -R , netstat ( you can run these yourself ) -
check in informix log, the approx time when this person tries this and
before that time, start a script with netstat or later check with
lastb/last ( last commands will help u only in case of telnet - in other
cases - if u have tcp/ip connection set for informix, netstat might help ).

Hope this helps.

Rgds
Preetinder

jorge valenzuela wrote:

>Hi all !!
>
>I frecuently seen this message on the log file:
>
>"Admin: Incorrect password or user Admin is not known on the database
>server"
>
>I believe two posible options there is someone that is very stupit that
>always
>forget his user and password or someone is trying to log in on the database
>server.
>
>In both cases, I need to identify this person, my question is how can I
>identify this user ?
>
>Thanks in advance.
>
>hpux=11.0
>ids=7.3
>
>
>
>
>sending to informix-list
>
>
>

sending to informix-list