Re: "root login denied". But by what?
On Fri, Jun 17, 2005 at 10:47:49PM +0200, Marcin Owsiany wrote:
> On Fri, Jun 17, 2005 at 07:33:02PM +0100, David Ramsden wrote:
> > Does anyone know what generated the above log entries?
>
> try:
>
> find /usr/sbin /sbin /usr/local/sbin \
> /usr/bin /usr/local/bin /bin /usr/lib /lib -type f | \
> while read f; do
> if strings $f | egrep -q 'no ip\?!'; then
> echo "it's $f !"
> fi
> done
>
Thanks for that Marcin. Worked well and found the program that caused
this.
It was scponly. I'm guessing a shell user ran it from an SSH session and
it's generated the log entries. So nothing to worry about!
Thanks once again!
David.
--
.''`. David Ramsden <david@hexstream.co.uk>
: :' : http://david.hexstream.co.uk/
`. `'` PGP key ID: 507B379B on wwwkeys.pgp.net
`- Debian - when my girlfriend's away and there's nothing better to do.
Reply to: