What do you guys do when you start to see this in your logs?

Failed logins from these:
guest/password from 213.169.xx.xx: 5 Time(s)
test/password from 213.169.xx.xx: 5 Time(s)

**Unmatched Entries**
Illegal user test from 213.169.xx.xx
Illegal user test from 213.169.xx.xx
Illegal user test from 213.169.xx.xx
Illegal user test from 213.169.xx.xx
Illegal user test from 213.169.xx.xx
Illegal user guest from 213.169.xx.xx
Illegal user guest from 213.169.xx.xx
Illegal user guest from 213.169.xx.xx
Illegal user guest from 213.169.xx.xx
Illegal user guest from 213.169.xx.xx

I've been getting these failed logins for a few days now. IP lookups have showed Korea and this latest one is Luxemberg.

What kinds of things do you guys do when you see these in your logs? Or is there nothing you can do and just leave it be?

 

 

 

 

Top