All Questions
12 questions
1
vote
1
answer
74
views
Which app or service connected to a specific domain?
How do I find out which app or service tried to access a particular domain or url in the past?
Tried searching for this here and other websites but not getting relevant results.
I have the Gnome Logs ...
- 11
0
votes
0
answers
49
views
The same log messages on every startup. I need to understand what they mean
When I check my logs in the "important" tab, they are pretty much the same on every startup. Is there something concerning about them? For example, what are these issues labeled as "...
- 31
0
votes
0
answers
386
views
I was hacked? (am I a slave?)
I'm a newbie to Ubuntu
Few days back, I noticed a text file named pwn3d.txt on my home folder. The following text was in it:
You are (fully) pwn3d due to a homobraphic error on your software ...
- 11
4
votes
6
answers
6k
views
who is trying to brute-force my password?
I was looking into my log files on my server and I found the following lines in: /var/log/.auth.log.1:
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse r= rhost=...
- 1,007
1
vote
1
answer
3k
views
What does these logs means? (DHCPREQUEST)
I'm using Ubuntu 14.04 LTS as my OS. For safety purposes, I'm always checking the logs to see any strange thing.
Today, I have found something that (probably) never happened to me:
Jun 11 23:33:59 ...
- 855
2
votes
1
answer
1k
views
UFW blocking connection every minute at home [duplicate]
I'm using a router to connect to the internet at home. I used a long password with WPA2/AES, changed the SSID and changed the default password.
But strangely, even if I disconnect the router from the ...
- 855
3
votes
2
answers
68
views
is there some sort of all-purpose logging tool I can download as a package?
As in, a tool that will give me easy to read logging information all in one convenient place, divvied up into categories. Logs for say, ssh daemon, user logins/logouts and other activity, installed ...
- 131
1
vote
0
answers
56
views
Files which tell that someone has accessed your computer [duplicate]
I know /var/log/auth.log shows who has been using sudo commands and /home/myusername/.bash_history shows command line commands. I would like to know if there are any more files similar to these 2 ...
- 111
21
votes
4
answers
102k
views
Where are ALL ubuntu logs/terminal history stored
In what folders are the logs and key histories stored so that I may make a script to purge them. Is there a specific folder for the hibernation partition or a file by which it keeps the RAM data on ...
27
votes
3
answers
7k
views
What automated intrusion notification/detection setup is good for home desktop use?
I've been using Linux for quite a while now and I always feel the need to have a passive software / script setup which can alert me of any suspicious network activities like scans, failed login ...
- 413
0
votes
1
answer
1k
views
Best Practices for Monitoring Log Files
What are the best practices for monitoring log files on a single Ubuntu Server (LAMP)?
Are there any specific "go-to" files that should be watched?
I use fail2ban to monitor failed logins, but am ...
- 271
7
votes
3
answers
24k
views
"Successful su for user by root" - suspicious entries in my /var/log/auth.log?
This post on reddit made me go through my logs. That's when I discovered the following entries which appeared on two non-subsequent days. "user" is my user account.
Aug 4 22:50:37 UbuntuSystem sudo: ...
- 21.7k