This is a multi-part message in MIME format. ------=_NextPart_000_0081_01C09085.39C2ED20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Seems I'm a little concered -- This is what shows up in my = /var/log/secure file Apr 3 21:33:20 gizmo xinetd[568]: START: ftp pid=3D17050 = from=3D206.212.47.168 Apr 3 21:33:21 gizmo xinetd[17050]: USERID: ftp OTHER :root Does that mean, someone "attemped to ftp as userid root and failed... or = he attempted and suceeded?" I dont think you can FTP as root, but it = looks like he did.. =20 Cheers, Tyler Hall "Goddam it, you'll never get the Purple Heart hiding in a foxhole! = Follow me!"=20 - Captain Henry P. "Jim" Crowe (Guadalcanal, January 13, 1943)=20 ------=_NextPart_000_0081_01C09085.39C2ED20 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Seems I'm a little concered = -- This is what=20 shows up in my /var/log/secure file
 
Apr  3 21:33:20 gizmo xinetd[568]: = START: ftp=20 pid=3D17050 from=3D206.212.47.168
Apr  3 21:33:21 gizmo = xinetd[17050]:=20 USERID: ftp OTHER :root
 
Does that mean, someone "attemped to = ftp as userid=20 root and failed... or he attempted and suceeded?"  I dont think you = can FTP=20 as root, but it looks like he did..  
 
Cheers,
Tyler Hall
 
"Goddam it, you'll never get the Purple = Heart=20 hiding in a foxhole! Follow me!"
- Captain Henry P. "Jim" Crowe=20 (Guadalcanal, January 13, 1943)
------=_NextPart_000_0081_01C09085.39C2ED20--