[CentOS] Entries in /var/log/messages

Sun Aug 21 23:45:34 UTC 2005
Kevin Krieser <k_krieser at sbcglobal.net>

-----Original Message-----
From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf
Of Marko A. Jennings
Sent: Sunday, August 21, 2005 5:07 PM
To: centos at centos.org
Subject: Re: [CentOS] Entries in /var/log/messages

If your circumstances allow it, I suggest moving your sshd to a port other
than 22.  That stopped it for me.

Marko


On Sun, August 21, 2005 3:03 pm, Jerry Geis said:
> I have quite a few entries in /var/log/messages for connection attempts.
> Is there anything other
> than ignoring them I can do? Example is below.
>
> Aug 21 15:48:19 machine sshd(pam_unix)[17903]: check pass; user unknown
> Aug 21 15:48:19 machine sshd(pam_unix)[17903]: authentication failure;
> logname= uid=0 euid=0 tty=ssh ruser=
> rhost=wsip-24-234-149-156.lv.lv.cox.net
>
> THanks,
>
> Jerry
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


In addition, there are options in the /etc/ssh/sshd_config file to limit
allowed users.  Such as AllowUsers username.
Also, setting PermitRootLogin no
Will increase safety.