[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: "root login denied". But by what?

On Fri, Jun 17, 2005 at 10:47:49PM +0200, Marcin Owsiany wrote:
> On Fri, Jun 17, 2005 at 07:33:02PM +0100, David Ramsden wrote:
> > Does anyone know what generated the above log entries?
> try:
> find /usr/sbin /sbin /usr/local/sbin \
>      /usr/bin /usr/local/bin /bin /usr/lib /lib -type f | \
> while read f; do
>  if strings $f | egrep -q 'no ip\?!'; then
>    echo "it's $f !"
>  fi
> done

Thanks for that Marcin. Worked well and found the program that caused 

It was scponly. I'm guessing a shell user ran it from an SSH session and 
it's generated the log entries. So nothing to worry about!

Thanks once again!
 .''`.     David Ramsden <david@hexstream.co.uk>
: :'  :    http://david.hexstream.co.uk/
`. `'`     PGP key ID: 507B379B on wwwkeys.pgp.net
  `-  Debian - when my girlfriend's away and there's nothing better to do.

Reply to: