Logwatch error or possible crack attempt?
Mike McMullen
mlm at loanprocessing.net
Sat Sep 25 19:53:55 UTC 2004
----- Original Message -----
From: "Lorn Miller" <ldmiller at flablader.no-ip.org>
To: <fedora-list at redhat.com>
Sent: Saturday, September 25, 2004 12:51 PM
Subject: Logwatch error or possible crack attempt?
> Logwatch for Sep 22
> --------------------- pam_unix Begin ------------------------
>
> <cut>
>
> vsftpd:
> Unknown Entries:
> authentication failure; logname= uid=0 euid=0 tty= ruser=
> rhost=80.141.233.183 : 16 Time(s)
> check pass; user unknown: 16 Time(s)
>
>
> ---------------------- pam_unix End -------------------------
>
>
Someone is probably running a script to see what systems they can
get into. Its the equivalent of walking down a street and trying the
door knobs to see which are open.
I get those in my logs every day.
Mike
More information about the fedora-list
mailing list