break in
Michael Havens
bmike1 at gmail.com
Wed Mar 4 10:17:46 MST 2015
Well that was anticlimatic!
$ tail -f /var/log/auth.log
Mar 4 08:39:01 c521 CRON[27505]: pam_unix(cron:session): session opened
for user root by (uid=0)
Mar 4 08:39:01 c521 CRON[27505]: pam_unix(cron:session): session closed
for user root
Mar 4 09:09:01 c521 CRON[27565]: pam_unix(cron:session): session opened
for user root by (uid=0)
Mar 4 09:09:02 c521 CRON[27565]: pam_unix(cron:session): session closed
for user root
Mar 4 09:17:01 c521 CRON[27595]: pam_unix(cron:session): session opened
for user root by (uid=0)
Mar 4 09:17:01 c521 CRON[27595]: pam_unix(cron:session): session closed
for user root
Mar 4 09:39:01 c521 CRON[27673]: pam_unix(cron:session): session opened
for user root by (uid=0)
Mar 4 09:39:01 c521 CRON[27673]: pam_unix(cron:session): session closed
for user root
Mar 4 10:09:01 c521 CRON[27984]: pam_unix(cron:session): session opened
for user root by (uid=0)
Mar 4 10:09:02 c521 CRON[27984]: pam_unix(cron:session): session closed
for user root
:-)~MIKE~(-:
On Wed, Mar 4, 2015 at 8:40 AM, Michael Butash <michael at butash.net> wrote:
> tail -f /var/log/auth.log (ubuntu, ymmv elsewhere)
>
> Should see your ssh attempts there at least, a million tries from root and
> other accounts if public.
>
> If you're behind a router, you wont 'see connections because there are
> none (you are hidden internally with NAT), but check your router or
> whatever has the public address on it.
>
> -mb
>
>
> On 03/03/2015 10:26 PM, Michael Havens wrote:
>
> I want to see how many break in attempts I get into my computer. I thought
> we already discussed this a bit a go but I can't find the email thread. How
> do I do this?
> :-)~MIKE~(-:
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.phxlinux.org/pipermail/plug-discuss/attachments/20150304/7b0f7812/attachment.html>
More information about the PLUG-discuss
mailing list