#1 Le 09/07/2005, à 00:56
- szdavid
Logwatch tentatives d'intrusion ?
Salut,
voilà, j'ai installé logwatch pour tester ; je le lance, je consulte mes mails internes et je découvre ceci :
**Unmatched Entries**
Invalid user lpd from ::ffff:64.62.176.138
Invalid user lpa from ::ffff:64.62.176.138
Invalid user admin from ::ffff:64.62.176.138
Invalid user admin from ::ffff:64.62.176.138
Invalid user admin from ::ffff:64.62.176.138
Invalid user ftpuser from ::ffff:64.62.176.138
Invalid user ftpuser from ::ffff:64.62.176.138
Invalid user ftpuser from ::ffff:64.62.176.138
Invalid user ftpuser from ::ffff:64.62.176.138
Invalid user ftpuser from ::ffff:64.62.176.138
Invalid user ftpuser from ::ffff:64.62.176.138
Invalid user ftpuser from ::ffff:64.62.176.138
Invalid user mailtest from ::ffff:64.62.176.138
Invalid user mailtest from ::ffff:64.62.176.138
Invalid user mailtest from ::ffff:64.62.176.138
Invalid user mailtest from ::ffff:64.62.176.138
Invalid user mailtest from ::ffff:64.62.176.138
Invalid user mailtest from ::ffff:64.62.176.138
Invalid user testuser from ::ffff:64.62.176.138
Invalid user testuser from ::ffff:64.62.176.138
Invalid user testuser from ::ffff:64.62.176.138
Invalid user testuser from ::ffff:64.62.176.138
Invalid user testuser from ::ffff:64.62.176.138
Invalid user testuser from ::ffff:64.62.176.138
Invalid user sales from ::ffff:64.62.176.138
Invalid user sales from ::ffff:64.62.176.138
Et c'est comme ça avec pleins de prénoms bidons (oracle, webmaster, admin, john,...)
Qu'est ce ?
Dois je m'en inquiéter ?
Hors ligne
#2 Le 09/07/2005, à 09:26
- devloop
Hors ligne
#3 Le 09/07/2005, à 09:29
- szdavid
Re : Logwatch tentatives d'intrusion ?
merci, je vais voir ça
Hors ligne