Люди подскажите что обозначают эти записи
Logwatch присылает мне их каждый день, особенно смущает записи типа:
Connections:
Service auth:
62.244.55.229: 3 Time(s)
Для наглядности даю урезанный LogWatch
################### LogWatch 5.1 (02/03/04) ####################
Processing Initiated: Thu Dec 15 04:02:01 2005
Date Range Processed: yesterday
Detail Level of Output: 0
Logfiles for Host:
################################################################
--------------------- Connections (secure-log) Begin ------------------------
Connections:
Service auth:
62.244.55.229: 3 Time(s)
66.180.172.13: 3 Time(s)
69.13.187.164: 6 Time(s)
81.9.97.83: 4 Time(s)
81.176.48.162: 39 Time(s)
83.69.132.148: 5 Time(s)
84.204.54.150: 2 Time(s)
84.252.148.9: 1 Time(s)
193.124.133.54: 20 Time(s)
193.243.158.1: 2 Time(s)
195.151.58.131: 3 Time(s)
195.158.4.161: 9 Time(s)
195.161.176.254: 3 Time(s)
195.230.83.201: 1 Time(s)
212.3.102.12: 6 Time(s)
212.188.13.162: 1 Time(s)
213.24.0.2: 3 Time(s)
213.24.0.12: 1 Time(s)
213.59.130.26: 1 Time(s)
213.135.101.30: 2 Time(s)
213.159.224.231: 6 Time(s)
213.159.224.233: 3 Time(s)
216.7.160.164: 1 Time(s)
217.107.219.180: 1 Time(s)
---------------------- Connections (secure-log) End -------------------------
--------------------- sendmail Begin ------------------------
Bytes Transferred: 141372
Messages Sent: 2
Total recipients: 2
---------------------- sendmail End -------------------------
--------------------- SSHD Begin ------------------------
Failed logins from these:
library/password from ::ffff:203.149.3.163: 1 Time(s)
library/password from ::ffff:209.177.110.4: 1 Time(s)
linux/password from ::ffff:203.149.3.163: 1 Time(s)
linux/password from ::ffff:209.177.110.4: 1 Time(s)
root/password from ::ffff:203.149.3.163: 1 Time(s)
root/password from ::ffff:209.177.110.4: 25 Time(s)
root/password from ::ffff:64.34.193.58: 8 Time(s)
Illegal users from these:
account/none from ::ffff:212.160.90.25: 2 Time(s)
account/password from ::ffff:212.160.90.25: 2 Time(s)
admin/none from ::ffff:203.149.3.163: 1 Time(s)
admin/none from ::ffff:209.177.110.4: 7 Time(s)
admin/none from ::ffff:212.160.90.25: 16 Time(s)
admin/password from ::ffff:203.149.3.163: 1 Time(s)
**Unmatched Entries**
error: Could not get shadow information for NOUSER
User mysql not allowed because account is locked
error: Could not get shadow information for NOUSER
User mysql not allowed because account is locked
error: Could not get shadow information for NOUSER
User apache not allowed because account is locked
---------------------- SSHD End -------------------------
Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.
Похожие темы
- Форум не могу разобраться с записями logwatch (2005)
- Форум подбирают пароли гады. (2006)
- Форум Безопасность ССХ (2005)
- Форум syslog messages - reboot ... (2006)
- Форум Проблема аутентификации SSH - WinBind - AD (2008)
- Форум Кто-то хочет подобрать пароль. Как с этим бороться? (2006)
- Форум CentOS 7 разрешить root по ssh (2017)
- Форум pam_script, вызов при подключении (2021)
- Форум getting pseudoterminals resource limit (2009)
- Форум аналог denyhost? (2018)