Date:  Sun, 13 May 2007 11:41:13 +0300
From:  Arthur Sherman <arturs (at mark) netvision.net.il>
Subject:  [coba-e:09841] Re: Is it pam problem
To:  coba-e (at mark) bluequartz.org
Message-Id:  <0JHZ00E7C1LEFG90 (at mark) mxout5.netvision.net.il>
In-Reply-To:  <009f01c794ff$38241a90$14001fac@DELLP4TACO>
X-Mail-Count: 09841

> Looks more like someone is probing/trying to hack your server....
> ----- Original Message ----- 
> From: "Tunc Eresen" <eresen (at mark) hotmail.com>
> To: <coba-e (at mark) bluequartz.org>
> Sent: Saturday, May 12, 2007 9:27 AM
> Subject: [coba-e:09835] Is it pam problem
> 
> 
> Hello all
> 
> When tail logs   I am getting following errors, It looks as 
> if PAM_pwdb is 
> at fault , Q, is how to fix it?
> 
> 
> 
> May 12 08:21:22 ns3 PAM_pwdb[5614]: check pass; user 
> unknownMay 12 08:21:22 
> ns3 PAM_pwdb[5617]: check pass; user unknownMay 12 08:21:22 ns3 
> PAM_pwdb[5620]: check pass; user unknown
> May 12 08:21:36 ns3 named[2931]: client 83.100.191.127#32768: no more 
> recursive clients: quota reachedMay 12 08:21:49 ns3 PAM_pwdb[5673]: 
> authentication failure; (uid=0) -> root for sshd serviceMay 
> 12 08:22:25 ns3 
> PAM_pwdb[5789]: authentication failure; (uid=0) -> mysql for 
> sshd service

Oh yes...
Someone is trying to guess your SSH user/pass...



Best,

--
Arthur