로그와치

s0ulhacker의 이미지

Logwatch 메세지가 왔는데 분석이 어렵네요

주요부분만 간추리면..아래와 같습니다.

--------------------- pam_unix Begin ------------------------

crond:
Unknown Entries:
session closed for user root: 50 Time(s)
session opened for user root by (uid=0): 50 Time(s)

dovecot:
Unknown Entries:
authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=jsh: 9 Time(s)
authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=jyd6190: 5 Time(s)

로그와치 구독하기