Am I Being Hacked?

yellowdog-general@lists.terrasoftsolutions.com yellowdog-general@lists.terrasoftsolutions.com
Fri May 16 10:08:01 2003


Saw these entries in my secure log file and am wondering if I am being
hacked or have already been hacked?

May 12 23:48:49 fs xinetd[578]: START: ftp pid=1323 from=192.168.1.4
May 12 23:48:49 fs xinetd[1323]: FAIL: ftp libwrap from=192.168.1.4
May 12 23:49:18 fs xinetd[578]: START: ftp pid=1324 from=192.168.1.4
May 12 23:49:18 fs xinetd[1324]: FAIL: ftp libwrap from=192.168.1.4
May 12 23:49:19 fs xinetd[1325]: FAIL: ftp libwrap from=192.168.1.4
May 12 23:49:19 fs xinetd[578]: START: ftp pid=1325 from=192.168.1.4
May 12 23:49:28 fs xinetd[578]: START: ftp pid=1326 from=192.168.1.4
May 12 23:49:28 fs xinetd[1326]: FAIL: ftp libwrap from=192.168.1.4
May 13 08:14:58 fs xinetd[578]: START: ftp pid=1934 from=81.49.205.21
May 13 08:14:58 fs xinetd[1934]: FAIL: ftp address from=81.49.205.21
May 13 10:57:19 fs xinetd[578]: START: ftp pid=2011 from=206.40.111.70
May 13 10:57:19 fs xinetd[2011]: FAIL: ftp address from=206.40.111.70
May 13 11:40:29 fs xinetd[578]: START: ftp pid=2074 from=192.168.1.1
May 13 11:40:29 fs xinetd[2074]: FAIL: ftp address from=192.168.1.1
May 13 11:40:43 fs xinetd[578]: START: ftp pid=2076 from=192.168.1.2
May 13 11:40:43 fs xinetd[2076]: FAIL: ftp address from=192.168.1.2
May 13 11:43:23 fs xinetd[578]: START: ftp pid=2081 from=192.168.1.2
May 13 11:43:23 fs xinetd[2081]: FAIL: ftp address from=192.168.1.2
May 13 11:43:30 fs xinetd[578]: START: ftp pid=2083 from=127.0.0.1
May 13 11:43:30 fs xinetd[2083]: FAIL: ftp address from=127.0.0.1
May 13 12:28:59 fs xinetd[578]: START: ftp pid=2137 from=210.103.80.11
May 13 12:28:59 fs xinetd[2137]: FAIL: ftp address from=210.103.80.11
May 13 23:09:32 fs xinetd[578]: START: ftp pid=2641 from=217.12.194.35
May 13 23:09:32 fs xinetd[2641]: FAIL: ftp address from=217.12.194.35
May 14 00:55:04 fs xinetd[578]: START: ftp pid=2694 from=80.218.91.86
May 14 00:55:04 fs xinetd[2694]: FAIL: ftp address from=80.218.91.86
May 15 09:38:41 fs xinetd[578]: START: ftp pid=4472 from=202.129.243.77
May 15 09:38:41 fs xinetd[4472]: FAIL: ftp address from=202.129.243.77
May 15 16:55:28 fs xinetd[578]: START: ftp pid=4701 from=67.27.26.91
May 15 16:55:28 fs xinetd[4701]: FAIL: ftp address from=67.27.26.91