Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 16 Dec 2018 18:49:17 +0100
From:      Matthias Fechner <idefix@fechner.net>
To:        freebsd-questions@freebsd.org
Subject:   FreeBSD 12 shows successfull logins with an error in auth.log
Message-ID:  <857dfd87-0cd6-ad20-6a67-f13cf00ee62a@fechner.net>

next in thread | raw e-mail | index | archive | help
Dear all,

I started now to upgrade the first servers from 11.2 to 12.0.

Now if I login with ssh to the server I see the following messages in
auth.log which causes fail2ban to block the IP after some successfull
logins:
Dec 16 18:45:16 _server_ sshd[74059]: Failed unknown for xxx from
2a01:5c0:e082:xxxx:xxxx:xxxx:xxxx:xxxx port 56676 ssh2
Dec 16 18:45:16 _server_ sshd[74059]: user idefix login class  [preauth]
Dec 16 18:45:16 _server_ sshd[74059]: Accepted publickey for xxx from
2a01:5c0:e082:xxxx:xxxx:xxxx:xxxx:xxxx port 56676 ssh2: ED25519 SHA256:xxx

Is there a reason why I get the `failed unkown for ...` log line?
Has anyone an idea, who to fix this?

Thanks.

Gruß
Matthias

-- 

"Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning." --
Rich Cook




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?857dfd87-0cd6-ad20-6a67-f13cf00ee62a>