[Logwatch] Under attack...

Shawn Stricker kb1ibt at gmail.com
Thu Feb 15 10:08:11 MST 2007


Also the amount of logins atleast from the logs I had, from when i  
was running a server on my comcast home connection, seems low. There  
were times where I would see 200-300 on a weekday and over 3k  
failures on the weekend

On Feb 15, 2007, at 12:02 PM, Shawn Stricker wrote:

> As far as i can tell the only 2 users that successfully logged in  
> were the following 2: nx and root
>> Users logging in through sshd:
>>     nx:
>>        216.229.21.70 (ip-26-39-21-70.hqglobal.net): 2 times
>>     root:
>>        127.0.0.1 (localhost.localdomain): 2 times
>
> the rest of the logins either fail due to bad passwords of  
> usernames that didn't exist on the system



More information about the Logwatch mailing list