Hello,

I'm a security newbie with a Raq3i with all the patches, portsentry/logcheck
running, and telnet turned off (using ssh instead).  I just started getting
messages like this in my log:

Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Jun 23 03:24:40 morpheus PAM_pwdb[479]: check pass; user unknown
Jun 23 03:24:47 morpheus PAM_pwdb[614]: check pass; user unknown
Jun 23 03:24:51 morpheus PAM_pwdb[479]: check pass; user unknown

That's it.  No other sign of attempted login or access.  Should I be
concerned?

TIA!

_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security

Reply via email to