suspicious logs

From: Boris Tomic (boris.tomic_at_zg.htnet.hr.nospam)
Date: 09/18/04

  • Next message: Matti Juhani Kurkela: "Re: S: ssh worms FAQ" 
    Date: Sat, 18 Sep 2004 21:53:57 +0200

    Hi

    I recently took vps hosting for testing (I am programmer). I have seen
    following logs on my vps:
    Sep 18 17:56:41 mysite login: 4 LOGIN FAILURES FROM ACBE4921.ipt.aol.com
    Sep 18 17:56:41 mysite login: 4 LOGIN FAILURES FROM
    ACBE4921.ipt.aol.com, www
    Sep 18 17:57:07 mysite login: 2 LOGIN FAILURES FROM ACBE4921.ipt.aol.com
    Sep 18 17:57:07 mysite login: 2 LOGIN FAILURES FROM
    ACBE4921.ipt.aol.com, junkbust
    Sep 18 17:57:54 mysite login: 2 LOGIN FAILURES FROM ACBE4921.ipt.aol.com
    Sep 18 17:57:54 mysite login: 2 LOGIN FAILURES FROM
    ACBE4921.ipt.aol.com, mailman
    ....

    there are many more of this logs with user name like: oracel, postgres,
    webmaster, administrator, ....

    As I am programmer I do not know is this something to be worred about
    and/or something that should be reported to someone?

    Tnx
    Boris

  • Next message: Matti Juhani Kurkela: "Re: S: ssh worms FAQ"