----- Original Message ----- From: "Lorn Miller" <ldmiller@xxxxxxxxxxxxxxxxxxx> To: <fedora-list@xxxxxxxxxx> Sent: Saturday, September 25, 2004 12:51 PM Subject: Logwatch error or possible crack attempt? > Logwatch for Sep 22 > --------------------- pam_unix Begin ------------------------ > > <cut> > > vsftpd: > Unknown Entries: > authentication failure; logname= uid=0 euid=0 tty= ruser= > rhost=80.141.233.183 : 16 Time(s) > check pass; user unknown: 16 Time(s) > > > ---------------------- pam_unix End ------------------------- > > Someone is probably running a script to see what systems they can get into. Its the equivalent of walking down a street and trying the door knobs to see which are open. I get those in my logs every day. Mike
