LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 09-05-2006, 04:37 AM   #1
asif2k
Member
 
Registered: Mar 2006
Location: Texas
Distribution: Fedora Project
Posts: 79

Rep: Reputation: 15
I am having trouble understanding my logwatch?


I got this message in my logwatch. I don't understand what it means? Can someone help me with this. I see this line in my logwatch.

Quote:
gdm:
Authentication Failures:
rhost= : 1 Time(s)

Unknown Entries:
check pass; user unknown: 1 Time(s)

Authentication Failures:
unknown (60.209.4.35): 6 Time(s)

Invalid Users:
Unknown Account: 6 Time(s)


what is this mean? Is this a known hack? some script kiddy tried but failed? correct me if I am wrong.

thanks in advance :-)
 
Old 09-05-2006, 06:41 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
It means someone tried to get in but failed (that way). Read your systems logs PAM entries for more details, then check which services you got running and wich ones aren't (properly) firewalled. Running a file integrity check and/or Chkrootkit and/or Rootkit Hunter just in case wouldn't hurt.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
I am having trouble understanding IRQ DMA I/O ports Paxmaster Linux - General 1 06-11-2005 08:41 PM
Having Trouble Understanding/Configuring Wine cajunaggie Linux - Software 5 10-28-2004 02:27 PM
trouble understanding how to unpack and install downloaded software thejester Linux - Newbie 1 08-02-2004 04:22 AM
Trouble understanding chmod & group permissions gen-ik Linux - Newbie 3 07-19-2004 01:51 PM
LogWatch exyst Linux - Software 0 03-13-2004 06:04 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:38 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration