Hi List, Please, help me understand these ssh logs below> 1) how it is logged normally Jul 28 09:45:23 mand sshd2[159]: connection from "213.163.25.176" - # me logging in from remote Jul 28 09:45:24 mand sshd[628]: log: Generating 768 bit RSA key. Jul 28 09:45:25 mand sshd[628]: log: RSA key generation complete. Jul 28 09:45:25 mand sshd[628]: log: Connection from 213.163.25.176 port 1075 Jul 28 09:45:36 mand sshd[628]: log: Password authentication for antal accepted. Jul 28 09:45:46 mand su: (to root) antal on /dev/pts/0 Jul 28 09:46:05 mand sshd[628]: log: Closing connection to 213.163.25.176 2) now what puzzles me Jul 28 13:42:11 mand sshd2[159]: connection from "209.151.75.1" - # unknown IP Jul 28 13:52:17 mand sshd2[1284]: LoginGraceTime exceeded. Nothing between the two sshd2 processes. How could it be tarced back what did happen between? Thanx> Antal ++++++++++++++++++++ Kreorg Oktat�k�zpont Hunyadi t�r 8, Budapest 1067 ++++++++++++++++++++ kreorg@kreorg.hu http://www.kreorg.hu ++++++++++++++++++++ Grid - Er� a v�ltoz�shoz.
nothing happend someone connected but did't login till the server killed the connection (some kind of idle timeout) Am Son, 2002-07-28 um 22.33 schrieb webmaster@kreorg.hu:
Hi List, Please, help me understand these ssh logs below>
1) how it is logged normally Jul 28 09:45:23 mand sshd2[159]: connection from "213.163.25.176" - # me logging in from remote Jul 28 09:45:24 mand sshd[628]: log: Generating 768 bit RSA key. Jul 28 09:45:25 mand sshd[628]: log: RSA key generation complete. Jul 28 09:45:25 mand sshd[628]: log: Connection from 213.163.25.176 port 1075 Jul 28 09:45:36 mand sshd[628]: log: Password authentication for antal accepted. Jul 28 09:45:46 mand su: (to root) antal on /dev/pts/0 Jul 28 09:46:05 mand sshd[628]: log: Closing connection to 213.163.25.176
2) now what puzzles me Jul 28 13:42:11 mand sshd2[159]: connection from "209.151.75.1" - # unknown IP
Jul 28 13:52:17 mand sshd2[1284]: LoginGraceTime exceeded.
Nothing between the two sshd2 processes. How could it be tarced back what did happen between?
Thanx> Antal
++++++++++++++++++++ Kreorg Oktatóközpont Hunyadi tér 8, Budapest 1067 ++++++++++++++++++++ kreorg@kreorg.hu http://www.kreorg.hu ++++++++++++++++++++ Grid - Erõ a változáshoz.
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
participants (2)
-
Georg Reitschmidt
-
webmaster@kreorg.hu