Root: 1 failure since last login

[Brian Fahrlander]

Dotan Cohen wrote:

> Thanks. There's a lot of root logins. Is that as scary as I think it
> is? This machine does have sshs running, but it's behind a router with
> no NAT forwarding.
> 
> Oct  8 10:09:22 ubuntu-laptop kdm: :0[5789]: (pam_unix) session closed
> for user ubuntu
> Oct  8 16:12:25 ubuntu-laptop sshd[5531]: Server listening on :: port 22.
> Oct  8 16:14:50 ubuntu-laptop kdm: :0[5856]: (pam_unix) authentication
> failure; logname= uid=0 euid=0 tty=:0 ruser= rhost=  user=ubuntu
[snipped]

    Everywhere you see "cron", that's a job doing something or the other 
at root level; *usually* it's the normal thing, but it's good to look at 
it, just to keep a healthy level of paranoia.

-- 
  ------------------------------------------------------------------------
  Brian Fahrländer                 Christian, Conservative, and Technomad
  Evansville, IN                              http://Fahrlander.net/brian
  ICQ: 5119262                         AOL/Yahoo/GoogleTalk: WheelDweller
  ------------------------------------------------------------------------