'Accepted password for $user', ale neni v `last`

Jan Pechanec jp at devnull.cz
Mon Mar 15 15:49:57 CET 2004


On Mon, 15 Mar 2004, Jan Stary wrote:

>Nazdar.
>
>Moje logy rikaji divnou vec:
>
>/var/log/security:
>Mar 15 15:05:26 ipfw: 1300 Accept TCP 195.113.31.137:34997 ${IP}:22 in via vr0
>Mar 15 15:05:46 ipfw: 1300 Accept TCP 195.113.31.137:35043 ${IP}:22 in via vr0
>
>/var/log/auth.log:
>Mar 15 15:05:40 Accepted password for ${user} from 195.113.31.137 port 34997
>Mar 15 15:05:49 Accepted password for ${user} from 195.113.31.137 port 35043
>
>`last` neobsahuje zadnou zminku.
>Ze stroje 195.113.31.137 se neloguju, vsak taky neexistuje.

xxx.hide:~$ ping 195.113.31.137
PING 195.113.31.137 (195.113.31.137): 56 data bytes
64 bytes from 195.113.31.137: icmp_seq=0 ttl=56 time=13.441 ms
64 bytes from 195.113.31.137: icmp_seq=1 ttl=56 time=21.223 ms
64 bytes from 195.113.31.137: icmp_seq=2 ttl=56 time=12.845 ms
^C

	traceroute:

<snip>
10  karlingw-c.karlin.mff.cuni.cz (195.113.31.130)  10.330 ms  33.004 ms  11.050 ms
11  195.113.31.137 (195.113.31.137)  12.460 ms  13.139 ms  12.794 ms



-- 
Jan Pechanec <jp (at) devnull (dot) cz>



More information about the Users-l mailing list