Logwatch error or possible crack attempt?

Mike McMullen mlm at loanprocessing.net
Sat Sep 25 19:53:55 UTC 2004


----- Original Message ----- 
From: "Lorn Miller" <ldmiller at flablader.no-ip.org>
To: <fedora-list at redhat.com>
Sent: Saturday, September 25, 2004 12:51 PM
Subject: Logwatch error or possible crack attempt?


> Logwatch for Sep 22
>  --------------------- pam_unix Begin ------------------------ 
> 
> <cut>
> 
> vsftpd:
>    Unknown Entries:
>       authentication failure; logname= uid=0 euid=0 tty= ruser=
> rhost=80.141.233.183 : 16 Time(s)
>       check pass; user unknown: 16 Time(s)
> 
> 
>  ---------------------- pam_unix End ------------------------- 
> 
> 

Someone is probably running a script to see what systems they can
get into. Its the equivalent of walking down a street and trying the
door knobs to see which are open.

I get those in my logs every day.

Mike






More information about the fedora-list mailing list