I've been trying to get X11 forwarding working, and while doing so I did this command:
Code: Select all
[xxxxxx@server1 ~]$ xauth list
207.148.248.143:1 MIT-MAGIC-COOKIE-1 a4d0906592154c5a517a92b6e5714a9d
xxxxxx.xxxxxxxxx.com/unix:1 MIT-MAGIC-COOKIE-1 a4d0906592154c5a517a92b6e5714a9d
xxxxxx.xxxxxxxxx.com/unix:10 MIT-MAGIC-COOKIE-1 6465c9d4a75e01035e8b9048d13455ed
Code: Select all
[xxxxxx@server1 ~]$ w
23:05:23 up 2:26, 1 user, load average: 0.29, 0.18, 0.17
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
xxxxxx pts/0 192.168.0.100 22:22 1.00s 0.47s 0.29s w
I checked for logins... found none but my own but the log only goes back to yesterday:
Code: Select all
[*******@server1 ~]$ sudo cat /var/log/secure | grep sshd
Apr 1 09:38:00 server1 sshd[2142]: Received signal 15; terminating.
Apr 1 09:38:03 server1 sshd[8039]: Server listening on 0.0.0.0 port 22.
Apr 1 09:38:03 server1 sshd[8039]: Server listening on :: port 22.
Apr 1 14:11:11 server1 sshd[8039]: Received signal 15; terminating.
Apr 2 20:40:28 server1 sshd[9719]: Server listening on 0.0.0.0 port 22.
Apr 2 20:40:28 server1 sshd[9719]: Server listening on :: port 22.
Apr 2 21:29:06 server1 sshd[10550]: Accepted password for ******* from 192.168.0.100 port 50957 ssh2
Apr 2 21:29:07 server1 sshd[10550]: pam_unix(sshd:session): session opened for user ******* by (uid=0)
Apr 2 21:34:48 server1 sshd[10550]: pam_unix(sshd:session): session closed for user *******
Apr 2 21:42:25 server1 sshd[10592]: Accepted password for ******* from 192.168.0.100 port 51052 ssh2
Apr 2 21:42:25 server1 sshd[10592]: pam_unix(sshd:session): session opened for user ******* by (uid=0)
Apr 2 22:21:42 server1 sshd[10592]: pam_unix(sshd:session): session closed for user *******
Apr 2 22:22:50 server1 sshd[12033]: Accepted password for ******* from 192.168.0.100 port 51749 ssh2
Apr 2 22:22:51 server1 sshd[12033]: pam_unix(sshd:session): session opened for user ******* by (uid=0)
Apr 2 22:35:45 server1 sshd[9719]: Received signal 15; terminating.
Apr 2 22:35:46 server1 sshd[12138]: Set /proc/self/oom_score_adj from 0 to -1000
Apr 2 22:35:46 server1 sshd[12138]: debug2: fd 3 setting O_NONBLOCK
Apr 2 22:35:46 server1 sshd[12138]: debug1: Bind to port 22 on 0.0.0.0.
Apr 2 22:35:46 server1 sshd[12138]: Server listening on 0.0.0.0 port 22.
Apr 2 22:35:46 server1 sshd[12138]: debug2: fd 4 setting O_NONBLOCK
Apr 2 22:35:46 server1 sshd[12138]: debug1: Bind to port 22 on ::.
Apr 2 22:35:46 server1 sshd[12138]: Server listening on :: port 22.