[Logwatch] Under attack...

Shawn Stricker kb1ibt at gmail.com
Thu Feb 15 10:02:41 MST 2007


As far as i can tell the only 2 users that successfully logged in  
were the following 2: nx and root
> Users logging in through sshd:
>     nx:
>        216.229.21.70 (ip-26-39-21-70.hqglobal.net): 2 times
>     root:
>        127.0.0.1 (localhost.localdomain): 2 times

the rest of the logins either fail due to bad passwords of usernames  
that didn't exist on the system


More information about the Logwatch mailing list