Error in auth.log

[mhadm]

Hi there,

I am trying to locate where this comes from in auth.log



worker authentication failure. Comes from pmgdaemon search search ...
daemon.log



Any idea?

 

[mhadm]

Ok solved,

someone enabled port forward from outside to the 8006 because the pmg is in the DMZ and evil tried brute force from outside, installed fail2ban problem solved