[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Am I hacked (unusual PAM-pwdb messages)?
- Subject: [cobalt-security] Am I hacked (unusual PAM-pwdb messages)?
- From: "Edward Cruz" <edward.cruz@xxxxxxxxx>
- Date: Sat, 23 Jun 2001 09:32:01 -0700
- Organization: Eiron, Inc.
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hello,
I'm a security newbie with a Raq3i with all the patches, portsentry/logcheck
running, and telnet turned off (using ssh instead). I just started getting
messages like this in my log:
Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Jun 23 03:24:40 morpheus PAM_pwdb[479]: check pass; user unknown
Jun 23 03:24:47 morpheus PAM_pwdb[614]: check pass; user unknown
Jun 23 03:24:51 morpheus PAM_pwdb[479]: check pass; user unknown
That's it. No other sign of attempted login or access. Should I be
concerned?
TIA!