Weird stuff in in my /var/log/auth.log
Posted
by
xXx
on Server Fault
See other posts from Server Fault
or by xXx
Published on 2012-06-17T20:34:53Z
Indexed on
2012/06/17
21:18 UTC
Read the original article
Hit count: 252
I just check my logs on my deed serv, i spotted some weird log in the auth.log :
Jun 17 22:27:01 mutualab CRON[16249]: pam_unix(cron:session): session opened for user user by (uid=0)
Jun 17 22:27:01 mutualab CRON[16249]: pam_unix(cron:session): session closed for user user
Jun 17 22:28:01 mutualab CRON[16253]: pam_unix(cron:session): session opened for user user by (uid=0)
Jun 17 22:28:01 mutualab CRON[16253]: pam_unix(cron:session): session closed for user alain
Jun 17 22:29:01 mutualab CRON[16257]: pam_unix(cron:session): session opened for user user by (uid=0)
Jun 17 22:29:01 mutualab CRON[16257]: pam_unix(cron:session): session closed for user user
Looks like somebody try to log - and suceed ? - but delog instantly ? I got the same log for hours now...
Do you know what happens ?
N.B : it's a 10.04 ubuntu server
© Server Fault or respective owner