[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Need help understading secure logs



I've notice that several of my /var/log/secure.# logs have strange enteries. Do the following entries mean that someone has tried to connect to my box from the Internet via ftp or telnet? If so, what logs will tell me what this person did?

secure.1
Jul 17 03:43:23 localhost in.ftpd[5854]: connect from 203.21.139.46
Jul 18 00:17:04 localhost in.telnetd[6433]: connect from 212.184.140.139

secure.2
Jul 11 03:52:46 localhost in.ftpd[6139]: connect from 24.3.241.79
Jul 11 20:42:41 localhost in.ftpd[6784]: connect from 193.61.167.202
Jul 12 14:58:24 localhost in.ftpd[7553]: connect from 212.213.223.249
Jul 12 20:43:19 localhost in.ftpd[7759]: connect from 193.61.167.202
Jul 13 16:11:58 localhost in.ftpd[8447]: connect from 64.228.9.136


Thanks,


Anthony





________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]