Re: break in

Top Page
Attachments:
Message as email
+ (text/plain)
+ (text/html)
+ (text/plain)
Delete this message
Reply to this message
Author: Michael Havens
Date:  
To: Mike Butash, Main PLUG discussion list
Subject: Re: break in
Well that was anticlimatic!

$ tail -f /var/log/auth.log
Mar 4 08:39:01 c521 CRON[27505]: pam_unix(cron:session): session opened
for user root by (uid=0)
Mar 4 08:39:01 c521 CRON[27505]: pam_unix(cron:session): session closed
for user root
Mar 4 09:09:01 c521 CRON[27565]: pam_unix(cron:session): session opened
for user root by (uid=0)
Mar 4 09:09:02 c521 CRON[27565]: pam_unix(cron:session): session closed
for user root
Mar 4 09:17:01 c521 CRON[27595]: pam_unix(cron:session): session opened
for user root by (uid=0)
Mar 4 09:17:01 c521 CRON[27595]: pam_unix(cron:session): session closed
for user root
Mar 4 09:39:01 c521 CRON[27673]: pam_unix(cron:session): session opened
for user root by (uid=0)
Mar 4 09:39:01 c521 CRON[27673]: pam_unix(cron:session): session closed
for user root
Mar 4 10:09:01 c521 CRON[27984]: pam_unix(cron:session): session opened
for user root by (uid=0)
Mar 4 10:09:02 c521 CRON[27984]: pam_unix(cron:session): session closed
for user root


:-)~MIKE~(-:

On Wed, Mar 4, 2015 at 8:40 AM, Michael Butash <> wrote:

> tail -f /var/log/auth.log (ubuntu, ymmv elsewhere)
>
> Should see your ssh attempts there at least, a million tries from root and
> other accounts if public.
>
> If you're behind a router, you wont 'see connections because there are
> none (you are hidden internally with NAT), but check your router or
> whatever has the public address on it.
>
> -mb
>
>
> On 03/03/2015 10:26 PM, Michael Havens wrote:
>
> I want to see how many break in attempts I get into my computer. I thought
> we already discussed this a bit a go but I can't find the email thread. How
> do I do this?
> :-)~MIKE~(-:
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list -
> To subscribe, unsubscribe, or to change your mail settings:http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list -
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>

---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss