Results 1 to 3 of 3

Thread: SSH logs

  1. #1
    Join Date
    Jun 2008
    Location
    Dublin, Ireland
    Posts
    298

    Default SSH logs

    Hi,

    Can anyone tell me where SSH logs are located? Someone is trying to access my website using some sort of automated script. I have a PHP application logger which shows that they have being loading the site URL followed by stuff like:

    Code:
    (roundcube)
    (mail2)
    (roundcubemail)
    (rms)
    (webmail2)
    (webmail)
    (wm)
    (bin)
    (roundcubemail-0.1)
    (roundcubemail-0.2)
    (roundcube-0.1)
    (roundcube-0.2)
    (round)
    (cube)
    (phpMyAdmin)
    (scripts)
    (README)
    (mysql
    I just want to see if they have also tried to access the web server via ssh.

  2. #2
    Join Date
    Jun 2008
    Location
    UTC+10
    Posts
    9,683
    Blog Entries
    4

    Default Re: SSH logs

    AFAIK ssh doesn't log file accesses since it's a shell and you can do much more than file access in a shell. If they had got ssh access you probably would know about it by now. Or maybe not. Anyway, successful and unsuccessful ssh logins are logged to /var/log/messages.

  3. #3
    Join Date
    Oct 2008
    Location
    Birmingham. AL
    Posts
    858

    Default Re: SSH logs

    Quote Originally Posted by ken_yap View Post
    \If they had got ssh access you probably would know about it by now. Or maybe not.
    That would indeed depend on how good they were.


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •