Tanya lagi ya dari new comer postfix :)
apa artinya logwatch ini ya, saya selalu mendapat email dari mesin
postfix, sepertinya ada yang ingin ngehack atau virus atau ... ? :)
note: di postfix saya install spammasin+squirellmail+apache, clam
(autoupdate) dan clamsmtp.
thx sebelumnya
onock
################### LogWatch 4.3.1 (01/13/03) ####################
Processing Initiated: Sun May 15 04:02:01 2005
Date Range Processed: yesterday
Detail Level of Output: 0
Logfiles for Host: sunter
################################################################
--------------------- pam_unix Begin ------------------------
sshd:
Authentication Failures:
root (210.204.118.251 ): 20 Time(s)
root (dsl-201-137-47-120.prod-infinitum.com.mx ): 3 Time(s)
---------------------- pam_unix End -------------------------
--------------------- SSHD Begin ------------------------
Failed logins from these:
root/password from 201.137.47.120: 3 Time(s)
root/password from 210.204.118.251: 20 Time(s)
**Unmatched Entries**
Illegal user tony from 210.204.118.251
Illegal user tony from 210.204.118.251
Illegal user alice from 210.204.118.251
Illegal user tony from 210.204.118.251
Illegal user alice from 210.204.118.251
-----------------------cut------------------------------
--------------------- SSHD Begin ------------------------
Failed logins from these:
apache/password from 211.9.39.162: 4 Time(s)
bin/password from 211.9.39.162: 4 Time(s)
ftp/password from 211.9.39.162: 2 Time(s)
games/password from 211.9.39.162: 4 Time(s)
mail/password from 211.9.39.162: 4 Time(s)
operator/password from 211.9.39.162: 4 Time(s)
root/password from 211.9.39.162: 39 Time(s)
root/password from 221.12.119.229: 8 Time(s)
sshd/password from 211.9.39.162: 4 Time(s)
-----------------------cut-----------------
