0 Members and 1 Guest are viewing this topic.
Aug 15 21:02:07 CentOS-64-64-minimal xinetd[494]: START: ftp pid=12470 from=::ffff:27.159.231.195Aug 15 21:02:07 CentOS-64-64-minimal pure-ftpd: (?@27.159.231.195) [INFO] New connection from 27.159.231.195Aug 15 21:02:13 CentOS-64-64-minimal pure-ftpd: (?@27.159.231.195) [WARNING] Authentication failed for user [qwe123]Aug 15 21:02:13 CentOS-64-64-minimal pure-ftpd: (?@27.159.231.195) [INFO] Logout.Aug 15 21:02:13 CentOS-64-64-minimal xinetd[494]: EXIT: ftp status=0 pid=12470 duration=6(sec)Aug 15 21:02:13 CentOS-64-64-minimal xinetd[494]: START: ftp pid=12672 from=::ffff:27.159.233.77Aug 15 21:02:13 CentOS-64-64-minimal pure-ftpd: (?@27.159.233.77) [INFO] New connection from 27.159.233.77Aug 15 21:02:20 CentOS-64-64-minimal pure-ftpd: (?@27.159.233.77) [WARNING] Authentication failed for user [admin999]Aug 15 21:02:20 CentOS-64-64-minimal pure-ftpd: (?@27.159.233.77) [INFO] Logout.Aug 15 21:02:20 CentOS-64-64-minimal xinetd[494]: EXIT: ftp status=0 pid=12672 duration=7(sec)Aug 15 21:02:23 CentOS-64-64-minimal xinetd[494]: START: ftp pid=13035 from=::ffff:120.43.20.127Aug 15 21:02:23 CentOS-64-64-minimal pure-ftpd: (?@120.43.20.127) [INFO] New connection from 120.43.20.127
It's because Kloxo/Kloxo-MR think service is syslog. In my investigation, this service is rsyslog. Need fix Kloxo-MR code for this situation.Open '/etc/rsyslog.conf' and add 'ftp.* /var/log/secure' under 'authpriv.* /var/log/secure'. And then restart with 'service rsyslog restart'.
Aug 15 20:14:01 web301 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1Aug 15 20:14:01 web301 pure-ftpd: (?@127.0.0.1) [INFO] Logout.Aug 15 20:19:01 web301 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1Aug 15 20:19:01 web301 pure-ftpd: (?@127.0.0.1) [INFO] Logout.Aug 15 20:24:01 web301 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1Aug 15 20:24:01 web301 pure-ftpd: (?@127.0.0.1) [INFO] Logout.Aug 15 20:29:01 web301 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1Aug 15 20:29:01 web301 pure-ftpd: (?@127.0.0.1) [INFO] Logout.Aug 15 20:33:00 web301 pure-ftpd: (?@110.136.160.110) [INFO] New connection from 110.136.160.110Aug 15 20:33:01 web301 pure-ftpd: (?@110.136.160.110) [INFO] spectra is now logged inAug 15 20:34:01 web301 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1Aug 15 20:34:01 web301 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Page created in 0.04 seconds with 18 queries.