SSH logs

English Network/Internet
#1

Hi,

Can anyone tell me where SSH logs are located? Someone is trying to access my website using some sort of automated script. I have a PHP application logger which shows that they have being loading the site URL followed by stuff like:


(roundcube)
(mail2)
(roundcubemail)
(rms)
(webmail2)
(webmail)
(wm)
(bin)
(roundcubemail-0.1)
(roundcubemail-0.2)
(roundcube-0.1)
(roundcube-0.2)
(round)
(cube)
(phpMyAdmin)
(scripts)
(README)
(mysql

I just want to see if they have also tried to access the web server via ssh.

#2

AFAIK ssh doesn’t log file accesses since it’s a shell and you can do much more than file access in a shell. If they had got ssh access you probably would know about it by now. Or maybe not. :wink: Anyway, successful and unsuccessful ssh logins are logged to /var/log/messages.

#3

That would indeed depend on how good they were.

lol!