Some error messages in var/log/messages

 
Thread Tools Search this Thread
Operating Systems Linux SuSE Some error messages in var/log/messages
# 1  
Old 04-27-2015
Some error messages in var/log/messages

How are you?
SUSE V10 and 11.
In /var/log/messages I see these lines in some servers. I'd like to know what causes these errors and how to fix them.
Thank you,
Code:
error: PAM: Authentication failure for root from XXXXXXXX
Did not receive identification string from XXXXXXX
Invalid user suse-gm from XXXXXXX
pam_tally(sshd:auth): pam_get_uid; no such user
error: PAM: User not known to the underlying authentication module for illegal user suse-gm from XXXXXXX
Failed keyboard-interactive/pam for invalid user suse-gm from XXXXX port XXXXX ssh2


Last edited by rbatte1; 04-28-2015 at 01:05 PM.. Reason: Remmoved FONT formatting. Emboldened file name and wrapped output in CODE tags.
# 2  
Old 04-27-2015
Easiest way is to move your ssh port. If you move the port, bots and other "things" will have difficulty finding your ssh.

If you don't need ssh, you can always just shut it down permanently (even uninstall it).
# 3  
Old 04-29-2015
Can you trace where they are from, e.g. source IP address. Is it one of your company's or coming in externally? If it is external and you don't allow any external ssh or sftp etc. in, then you better speak with those that manage your company firewall.

If it's internal, then you have a local source to contact.



Robin
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Transfer the logs being thrown into /var/log/messages into another file example /var/log/volumelog

I have been searching and reading about syslog. I would like to know how to Transfer the logs being thrown into /var/log/messages into another file example /var/log/volumelog. tail -f /var/log/messages dblogger: msg_to_dbrow: no logtype using missing dblogger: msg_to_dbrow_str: val ==... (2 Replies)
Discussion started by: kenshinhimura
2 Replies

2. Red Hat

/var/log/messages error "kernel: RPC: bad TCP reclen"

Hi, I am seeing the following errors in my environment, not sure why is it happening, any ideas? Thanks. kernel: RPC: bad TCP reclen 0x73746174 (non-terminal ) Dec 17 02:14:48 kernel: RPC: bad TCP reclen 0x63480000 (large) Dec 17 02:14:48 kernel: RPC: bad TCP reclen 0x633f0000 (large) Dec... (5 Replies)
Discussion started by: amarlinux
5 Replies

3. UNIX for Dummies Questions & Answers

fprintd messages in /var/log/messages

Whenever a user uses su I get the following error messages in /var/log/messages: Nov 23 04:24:55 <REMOVED> abrt: saved core dump of pid 26141 (/usr/libexec/fprintd) to /var/spool/abrt/ccpp-1322018695-26141.new/coredump (753664 bytes) Nov 23 04:24:55 <REMOVED> abrtd: Directory... (3 Replies)
Discussion started by: JakesHat
3 Replies

4. Shell Programming and Scripting

How can view log messages between two time frame from /var/log/message or any type of log files

How can view log messages between two time frame from /var/log/message or any type of log files. when logfiles are very big and especially many messages with in few minutes, I would like to display log messages between 5 minute interval. Could you pls give me the command? (1 Reply)
Discussion started by: johnveslin
1 Replies

5. Solaris

Difference between /var/log/syslog and /var/adm/messages

Hi, Is the contents in /var/log/syslog and /var/adm/messages are same?? Regards (3 Replies)
Discussion started by: vks47
3 Replies

6. UNIX for Advanced & Expert Users

/var/adm/messages vs /var/log/messages

The /var/adm/messages in Solaris seem to log more system messages/errors compared to /var/log/messages in Linux. I checked the log level in Linux and they seem OK. Is there any other log file that contains the messages or is it just that Linux doesn't log great many things? (2 Replies)
Discussion started by: gomes1333
2 Replies

7. Solaris

diff b/w /var/log/syslog and /var/adm/messages

hi sirs can u tell the difference between /var/log/syslogs and /var/adm/messages in my working place i am having two servers. in one servers messages file is empty and syslog file is going on increasing.. and in another servers message file is going on increasing but syslog file is... (2 Replies)
Discussion started by: tv.praveenkumar
2 Replies

8. UNIX for Advanced & Expert Users

error messages in /var/adm/messages

Hi, I have a SunFire V490, Solaris 10 with XP1024 storage and HP Library. I have noticed the following error messages in the /var/adm/messages file. These errors are being generated constantly. Also commands like devfsadm, format cfgadm etc are getting hung. After a reboot it works fine for a... (1 Reply)
Discussion started by: nitinp82
1 Replies

9. Solaris

[urgent help] error log on /var/adm/messages

hi experts, i'm having more error log on /var/adm/messages could anyone help to description what is this error logs means???? and how to fix it? below is the logs : Nov 22 20:03:40 USSDGtbs-1 unix: Nov 22 20:03:40 USSDGtbs-1 ^Mpanic/thread=3001345edc0: Nov 22 20:03:40 USSDGtbs-1 unix: ... (2 Replies)
Discussion started by: bucci
2 Replies

10. Red Hat

LAuS error messages in /var/log/cron

I'm running RedHat Linux Enterprise Server ES Version 3 and I've stopped the audit service. Now I'm getting the following error messages in /var/log/cron May 17 07:01:01 pam crond: LAuS error - do_command.c:243 - laus_log: (19) laus_log: No such device May 17 08:01:01 pam crond: (root) CMD... (1 Reply)
Discussion started by: soliberus
1 Replies
Login or Register to Ask a Question