[Logwatch] Under attack...

Shawn Stricker kb1ibt at gmail.com
Thu Feb 15 10:02:41 MST 2007

As far as i can tell the only 2 users that successfully logged in  
were the following 2: nx and root
> Users logging in through sshd:
>     nx:
> (ip-26-39-21-70.hqglobal.net): 2 times
>     root:
> (localhost.localdomain): 2 times

the rest of the logins either fail due to bad passwords of usernames  
that didn't exist on the system

More information about the Logwatch mailing list