[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Help understanding /var/log/secure.#



I've notice that several of my /var/log/secure.# logs have enteries that look like someone tried to access my box via ftp and telnet. If so, what logs can I look at that will tell me what this person did or tried to do?

secure.1
Jul 17 03:43:23 localhost in.ftpd[5854]: connect from 203.21.139.46
Jul 18 00:17:04 localhost in.telnetd[6433]: connect from 212.184.140.139

secure.2
Jul 11 03:52:46 localhost in.ftpd[6139]: connect from 24.3.241.79
Jul 11 20:42:41 localhost in.ftpd[6784]: connect from 193.61.167.202
Jul 12 14:58:24 localhost in.ftpd[7553]: connect from 212.213.223.249
Jul 12 20:43:19 localhost in.ftpd[7759]: connect from 193.61.167.202
Jul 13 16:11:58 localhost in.ftpd[8447]: connect from 64.228.9.136


Thanks,


Anthony

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]