[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Problems with logcheck readout?



> Mar 27 05:15:03 ns1 sendmail[26811]: NOQUEUE: localhost [127.0.0.1] did
not
> issue MAIL/EXPN/VRFY/ETRN during connection to MTA

machine sending mail to itself

> Mar 21 17:15:33 ns1 proftpd[16878]: server name
> (ARouen-101-1-1-109.abo.wanadoo.fr[193.251.28.109]) - no such user
> 'anonymous'
> Mar 21 17:15:35 ns1 last message repeated 4 times

somone attempting anonymous ftp on your server.

> This one appears evey few minutes, hundreds of entries
>
> Mar 22 00:00:01 ns1 proftpd[901]: server name (localhost[127.0.0.1]) - FTP
> session closed.
> Mar 22 00:00:04 ns1 telnetd[914]: ttloop: read: Broken pipe

the active system monitor checking ftp is working okay - and probably
failing to check that telnet is working alright.

hope this helps
--
/\/\ a R (