What does this really mean from logwatch?

Patrick Nelson pnelson at neatech.com
Sun Sep 26 18:02:49 UTC 2004


FC2 current

I'm starting to get these in my logwatch.  Great getting scanned... 
What is the pam_ldap connection error thought?  Why is it in the ssh 
section?  Anyone help me understand this?

---snip---
--------------------- SSHD Begin ------------------------


Failed logins from these:
    admin/password from ::ffff:219.140.166.19: 2 Time(s)
    guest/password from ::ffff:219.140.166.19: 1 Time(s)
    root/password from ::ffff:219.140.166.19: 3 Time(s)
    test/password from ::ffff:219.140.166.19: 2 Time(s)
    user/password from ::ffff:219.140.166.19: 1 Time(s)

Illegal users from these:
    admin/none from ::ffff:219.140.166.19: 2 Time(s)
    admin/password from ::ffff:219.140.166.19: 2 Time(s)
    guest/none from ::ffff:219.140.166.19: 1 Time(s)
    guest/password from ::ffff:219.140.166.19: 1 Time(s)
    test/none from ::ffff:219.140.166.19: 2 Time(s)
    test/password from ::ffff:219.140.166.19: 2 Time(s)
    user/none from ::ffff:219.140.166.19: 1 Time(s)
    user/password from ::ffff:219.140.166.19: 1 Time(s)

Users logging in through sshd:
    root:
       see (snip): 4 times
       dee (snip): 1 time
       eee (snip): 1 time

**Unmatched Entries**
pam_ldap: ldap_starttls_s: Connect error
pam_ldap: ldap_starttls_s: Connect error
pam_ldap: ldap_starttls_s: Connect error
pam_ldap: ldap_starttls_s: Connect error
pam_ldap: ldap_starttls_s: Connect error
pam_ldap: ldap_starttls_s: Connect error
pam_ldap: ldap_starttls_s: Connect error
pam_ldap: ldap_starttls_s: Connect error
pam_ldap: ldap_starttls_s: Connect error

  ---------------------- SSHD End -------------------------
---snip---






More information about the fedora-list mailing list