Date: Tue, 18 Jul 2006 22:38:18 -0400 (EDT) From: "Tuc at T-B-O-H.NET" <ml@t-b-o-h.net> To: doug@fledge.watson.org (doug) Cc: freebsd-questions@freebsd.org Subject: Re: nologin: Attempted login by root on UNKNOWN Message-ID: <200607190238.k6J2cI45005013@himinbjorg.tucs-beachin-obx-house.com> In-Reply-To: <20060718195841.B54217@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> > Jul 18 14:08:47 asgard nologin: Attempted login by root on UNKNOWN > > Jul 18 14:08:47 asgard kernel: Jul 18 14:08:47 asgard nologin: Attempted login by root on UNKNOWN > > Jul 18 14:21:02 asgard nologin: Attempted login by root on UNKNOWN > > Jul 18 14:21:02 asgard kernel: Jul 18 14:21:02 asgard nologin: Attempted login by root on UNKNOWN > > > > I'm not sure who/what/where to start looking. Ideas? > > What does /var/log/auth.log show? > Nothing since I send everything to a single file and a syslog server. *.debug /var/log/spool *.debug @syslog.t-b-o-h.net *.err;kern.debug;auth.notice;mail.crit /dev/console *.emerg * Tuc/TBOH
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200607190238.k6J2cI45005013>