Hi every one!:
I`m kind of familiar with some of the system logs "not an expert"
but at least I can
recognize when something is not o.k., well I was watching the
"/var/log/secure" when some
strange ftp connection show on the file. I get this line from the
"/var/log/message":
217:Mar 11 01:15:40 homenet ftp(pam_unix)[11587]: check pass; user unknown
218:Mar 11 01:15:40 homenet ftp(pam_unix)[11587]: authentication
failure; logname= uid=0 euid=0 tty= ruser=
rhost=80-200-156-84.adsl.powered-by.skynet.be
219:Mar 11 01:15:43 homenet ftpd:
80-200-156-84.adsl.powered-by.skynet.be: connected:
IDLE
[11587]: failed login from 80-200-156-84.adsl.powered-by.skynet.be
[80.200.156.84]
220:Mar 11 01:15:59 homenet ftpd:
80-200-156-84.adsl.powered-by.skynet.be: connected:
IDLE
[11587]: lost connection to 80-200-156-84.adsl.powered-by.skynet.be
[80.200.156.84]
221:Mar 11 01:15:59 homenet ftpd:
80-200-156-84.adsl.powered-by.skynet.be: connected:
IDLE
[11587]: FTP session closed
Can some one help me find out what all these line mean?
Thaks everyone ;-)
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
