'Accepted password for $user', ale neni v `last`
Jan Pechanec
jp at devnull.cz
Mon Mar 15 15:49:57 CET 2004
On Mon, 15 Mar 2004, Jan Stary wrote:
>Nazdar.
>
>Moje logy rikaji divnou vec:
>
>/var/log/security:
>Mar 15 15:05:26 ipfw: 1300 Accept TCP 195.113.31.137:34997 ${IP}:22 in via vr0
>Mar 15 15:05:46 ipfw: 1300 Accept TCP 195.113.31.137:35043 ${IP}:22 in via vr0
>
>/var/log/auth.log:
>Mar 15 15:05:40 Accepted password for ${user} from 195.113.31.137 port 34997
>Mar 15 15:05:49 Accepted password for ${user} from 195.113.31.137 port 35043
>
>`last` neobsahuje zadnou zminku.
>Ze stroje 195.113.31.137 se neloguju, vsak taky neexistuje.
xxx.hide:~$ ping 195.113.31.137
PING 195.113.31.137 (195.113.31.137): 56 data bytes
64 bytes from 195.113.31.137: icmp_seq=0 ttl=56 time=13.441 ms
64 bytes from 195.113.31.137: icmp_seq=1 ttl=56 time=21.223 ms
64 bytes from 195.113.31.137: icmp_seq=2 ttl=56 time=12.845 ms
^C
traceroute:
<snip>
10 karlingw-c.karlin.mff.cuni.cz (195.113.31.130) 10.330 ms 33.004 ms 11.050 ms
11 195.113.31.137 (195.113.31.137) 12.460 ms 13.139 ms 12.794 ms
--
Jan Pechanec <jp (at) devnull (dot) cz>
More information about the Users-l
mailing list