FC2 current
I'm starting to get these in my logwatch. Great getting scanned... What is the pam_ldap connection error thought? Why is it in the ssh section? Anyone help me understand this?
---snip--- --------------------- SSHD Begin ------------------------
Failed logins from these: admin/password from ::ffff:219.140.166.19: 2 Time(s) guest/password from ::ffff:219.140.166.19: 1 Time(s) root/password from ::ffff:219.140.166.19: 3 Time(s) test/password from ::ffff:219.140.166.19: 2 Time(s) user/password from ::ffff:219.140.166.19: 1 Time(s)
Illegal users from these: admin/none from ::ffff:219.140.166.19: 2 Time(s) admin/password from ::ffff:219.140.166.19: 2 Time(s) guest/none from ::ffff:219.140.166.19: 1 Time(s) guest/password from ::ffff:219.140.166.19: 1 Time(s) test/none from ::ffff:219.140.166.19: 2 Time(s) test/password from ::ffff:219.140.166.19: 2 Time(s) user/none from ::ffff:219.140.166.19: 1 Time(s) user/password from ::ffff:219.140.166.19: 1 Time(s)
Users logging in through sshd:
root:
see (snip): 4 times
dee (snip): 1 time
eee (snip): 1 time**Unmatched Entries** pam_ldap: ldap_starttls_s: Connect error pam_ldap: ldap_starttls_s: Connect error pam_ldap: ldap_starttls_s: Connect error pam_ldap: ldap_starttls_s: Connect error pam_ldap: ldap_starttls_s: Connect error pam_ldap: ldap_starttls_s: Connect error pam_ldap: ldap_starttls_s: Connect error pam_ldap: ldap_starttls_s: Connect error pam_ldap: ldap_starttls_s: Connect error
---------------------- SSHD End ------------------------- ---snip---
