Log questions, not sure where to start.

TrademasterAdam

New member
Joined
May 12, 2006
Messages
1
Hello there!

I'm brand new to this, I'm not even sure if this is the right forum for this type of question. I just got off of a shared host onto a VPS and I'm having server/load problems, specifically with kmemsize and numtcpsock. I was told to go surf through the /var folder for messages and here are some fun messgaes I found.


Are these people trying to hack in? Is there some way to limit their number of login attempts?

May 9 20:18:18 vps sshd(pam_unix)[4866]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=amazonas.ebiz-webhosting.de
May 9 20:18:20 vps sshd(pam_unix)[4884]: check pass; user unknown

May 9 20:38:56 vps sshd(pam_unix)[4485]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=www.tlaxcala.gob.mx user=root
May 9 20:39:03 vps sshd(pam_unix)[4643]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=www.tlaxcala.gob.mx user=root


May 10 13:29:37 vps sshd(pam_unix)[19139]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=courrier.stella-net.fr user=root
May 10 13:29:41 vps sshd(pam_unix)[19159]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=courrier.stella-net.fr user=root


Warhammer40k.com is an account on my server, I have no idea what this is:

May 9 23:42:00 vps named[14067]: client 88.8.215.136#10211: update 'warhammer40k.com/IN' denied
May 9 23:42:08 vps named[14067]: client 88.8.215.136#10212: update 'warhammer40k.com/IN' denied


Thanks for the help!

TrademasterAdam
 
Back
Top