Logwatch error or possible crack attempt?

[Patrick Boutilier]

Lorn Miller wrote:
> Logwatch for Sep 22
>  --------------------- pam_unix Begin ------------------------ 
> 
> <cut>
> 
> vsftpd:
>    Unknown Entries:
>       authentication failure; logname= uid=0 euid=0 tty= ruser=
> rhost=80.141.233.183 : 16 Time(s)
>       check pass; user unknown: 16 Time(s)
> 
> 
>  ---------------------- pam_unix End ------------------------- 
> 
> 
> Is there a local process that would do that or did someone try to get
> into my ftp server 16 times?

Somebody from 80.141.233.183 .

   Where could I check to see if they
> succeeded?
> 
> 

Checl your logs for successful logins from 80.141.233.183 .