[SATLUG] /var/log/secure: ssh attack

Greg Willden gwillden at gmail.com
Fri Sep 3 21:57:52 CDT 2004


On Fri, 3 Sep 2004 18:33:34 -0500, Leo E. Midha <leoem at satx.rr.com> wrote:
> Like the log says, don't panic.  This are common probes.  I wouldn't worry
> about it unless you say a successful login.

I doubt that you would see a successful login (from a cracker) in that
file.  They would most likely cover their tracks.

But I'm not a security expert.
Greg


More information about the Satlug mailing list