LinuxQuestions.org
Latest LQ Deal: Linux Power User Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 07-04-2008, 03:44 AM   #1
jomen
Senior Member
 
Registered: May 2004
Location: Leipzig/Germany
Distribution: Arch
Posts: 1,687

Rep: Reputation: 54

As far as I know it is not possible to log them - not in clear-text. And that is a good thing...

womd
You should be more concerned about _your_ own passwords.
These should be good strong passwords.
Do not enable sshd if you don't need it.
Do not allow root logins. You can login as any user - and then "su" to root should you need to.
Take other measures to prevent such scans - firewall rules which only allow a certain subnetnet or ip to connect - and/or rules that only allow a few tries per time-interval to prevent DOS.
 
Old 07-04-2008, 07:56 AM   #2
womd
Member
 
Registered: Sep 2005
Location: Austria
Posts: 35

Rep: Reputation: 15
see wrong ssh passwords

Hi !

my message.log shows lines like this:

Jun 30 04:34:11 smallsau sshd[7552]: Failed password for root from ::ffff:189.141.192.68 port 44772 ssh2
Jun 30 04:34:13 smallsau sshd[7554]: Failed password for root from ::ffff:189.141.192.68 port 44859 ssh2
Jun 30 04:34:16 smallsau sshd[7556]: Failed password for root from ::ffff:189.141.192.68 port 44955 ssh2
Jun 30 04:34:18 smallsau sshd[7558]: Failed password for root from ::ffff:189.141.192.68 port 45041 ssh2


i would like to know which password was used for those failed-logins ...

can anyone give me a hint ?

the machine runs: SUSE Linux 2.6.11.4-20a-default


greetings

chris
 
Old 07-04-2008, 08:16 AM   #3
estabroo
Senior Member
 
Registered: Jun 2008
Distribution: debian, ubuntu, sidux
Posts: 1,122
Blog Entries: 2

Rep: Reputation: 123Reputation: 123
As far as I know ssh doesn't log failed passwords, but you could always modify it so that it does log them.
 
Old 07-04-2008, 08:44 AM   #4
jomen
Senior Member
 
Registered: May 2004
Location: Leipzig/Germany
Distribution: Arch
Posts: 1,687

Original Poster
Rep: Reputation: 54
As far as I know it is not possible to log them - not in clear-text. And that is a good thing...

womd
You should be more concerned about _your_ own passwords.
These should be good strong passwords.
Do not enable sshd if you don't need it.
Do not allow root logins. You can login as any user - and then "su" to root should you need to.
Take other measures to prevent such scans - firewall rules which only allow a certain subnetnet or ip to connect - and/or rules that only allow a few tries per time-interval to prevent DOS.
 
Old 07-07-2008, 03:39 AM   #5
womd
Member
 
Registered: Sep 2005
Location: Austria
Posts: 35

Rep: Reputation: 15
ok, thanks

thank you for your thought's .....


the thing to see the password's would be more a thing of interest, to see how good they guess .... jeah .. it should not log true passwords... i'll leave this idea ...

i "think" , i have very strong password which is unguessable ...
i'll try to get some rules in place as you sayd !


... for anyone who is interested .. here is a patch for sshd .. to see the pwd'S : http://unixcluster.dk/index.php?/arc...s,-part-2.html

have a nice day

cu
 
Old 07-07-2008, 06:03 AM   #6
jomen
Senior Member
 
Registered: May 2004
Location: Leipzig/Germany
Distribution: Arch
Posts: 1,687

Original Poster
Rep: Reputation: 54
That is...interesting - thank you!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Wrong end of the stick with passwords? ayteebee Linux - Security 5 02-05-2006 05:29 PM
SSH and passwords Hazzie Linux - Security 3 11-18-2004 10:53 AM
ssh question about passwords shanenin Linux - Networking 0 09-13-2004 01:44 PM
Wrong Passwords Crash X lasindi Fedora 1 08-04-2004 04:35 PM
How to log wrong passwords tyler_durden Linux - Security 3 02-05-2002 05:55 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 04:36 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration