3
votes
1answer
121 views

Wheezy processes die periodically

I have a very weird problem. Certain processes on my mail server, but not all, die periodically (every second month or so). A few of the process that die are: ssh dovecot postfix Processes that ...
0
votes
2answers
248 views

Logging ssh info using syslog-ng daemon in Cygwin

I have setup the syslog-ng daemon using Cygwin in Windows 7. What I want to do is to log all of the ssh failed passwords, etc to /var/log/sshd.log. I tried to do this by adding the following line: ...
1
vote
1answer
443 views

Additional Security Measures for Syslog over SSH

I'm currently working on setting up some secure syslog connections between a few Fedora servers. This is my currently setup 192.168.56.110 (syslog-server) <----> 192.168.57.110 (syslog-agent) ...
1
vote
2answers
131 views

Server logging goes haywire and some system services die until hard reboot

The gist of our problem is that we lose ssh access to our VPS and our logfiles get all mixed up. Doing a hard reboot through our hosting provider's web console seems to fix things, but the problem ...
3
votes
4answers
210 views

Filtering SSHD Logs

I'm just wondering about the best way to filter my sshd logs. The problem is that I monitor my boxes over SSH using Nagios and Cacti. They both connect every 5 mins and this clogs up my log files with ...
3
votes
3answers
1k views

Most common account names used in ssh brute force attacks

Does anyone maintain lists of the most frequently guessed account names that are used by attackers brute-forcing ssh? For your amusement, from my main server's logs over the last month (43 313 failed ...
1
vote
2answers
2k views

syslog (auth log) reports incorrect time

I have noticed that my syslog reports incorrect time for some authentication entries. The typical behaviour looks like this: Feb 16 13:32:20 dev sshd[29537]: Invalid user oracle from 110.188.0.123 ...