[Dshield] FTP server strange logins

Dominik Składanowski dskladanowski at gmail.com
Mon Aug 21 07:07:55 GMT 2006


Hello list.

Does anybody notice strange tests of yours FTP servers? It looks like  
someone tries to log into server, but without any login name and  
password.

I have observed this scan second time in last 2 weeks.

Below I attached fragment of my logwatch report.

--------------------- pam_unix Begin ------------------------

vsftpd:
    Unknown Entries:
       authentication failure; logname= uid=0 euid=0 tty= ruser=  
rhost=124.128.254.69 : 2283 Time(s)
       check pass; user unknown: 2283 Time(s)


  ---------------------- pam_unix End -------------------------

Regards

Dominik



More information about the list mailing list