The are many people in the world that just scan the Internet and looks for
open FTP, open SMTP relay, telnet server without password and so on.
You are just dealing with such individuals
Gianni Bragante
"simon lee" <(E-Mail Removed)> ha scritto nel messaggio
news:bs6bug$kkn$(E-Mail Removed)...
> Dear all,
> Every day when I see the root's email in my redhat 8.0 server, there are
> many
> strange people trying to login to the server as follows
>
> ---------------- Connections (secure-log) Begin -------------------
>
> Connections:
> Service ftp:
> 203.140.30.87: 1 Time(s)
> 218.148.76.176: 1 Time(s)
> 67.126.141.86: 1 Time(s)
> 211.200.29.81: 2 Time(s)
> 211.99.194.148: 1 Time(s)
> 211.200.29.83: 2 Time(s)
> 218.165.110.134: 1 Time(s)
> 218.104.210.19: 1 Time(s)
> 61.3.144.2: 1 Time(s)
> 211.155.253.83: 2 Time(s)
> Service telnet:
> 210.22.202.77: 2 Time(s)
> 209.208.0.15: 1 Time(s)
>
> ----------------- Connections (secure-log) End --------------------
>
>
>
> ###################### LogWatch End #########################
>
> Why? I want to get details concerning the log file, "xferlog", nothing
about
> those ips above can be seen for ftp connection. Why? Please give me help,
> thanks.
>
> Regards,
> Simon
>
>
>
|