Difference between revisions of "Secure file transfer program (sftp)"

From wikieduonline
Jump to navigation Jump to search
Tags: Mobile web edit, Mobile edit
Tags: Mobile web edit, Mobile edit
Line 18: Line 18:
 
Example of failed login with [[verbose]] mode:
 
Example of failed login with [[verbose]] mode:
 
  May 07 15:55:01 SERVER sshd[1870524]: Failed none for  USERNAME  from 23.33.xx.xx port 12616 ssh2
 
  May 07 15:55:01 SERVER sshd[1870524]: Failed none for  USERNAME  from 23.33.xx.xx port 12616 ssh2
  May 07 15:55:01 SERVER sshd[1870524]: Failed [[publickey]] for USERNAME  from 23.33.xx.xx port 12616 ssh2: [[RSA]] [[SHA256]]:tAkCKfvCmOTpVeceSyAOy9Sjyp213hQ7RLTyKUaNw12
+
  May 07 15:55:01 SERVER sshd[1870524]: [[Failed publickey for]]  USERNAME  from 23.33.xx.xx port 12616 ssh2: [[RSA]] [[SHA256]]:tAkCKfvCmOTpVeceSyAOy9Sjyp213hQ7RLTyKUaNw12
 
  May 07 15:55:00 SERVER sshd[1870524]: Connection from 23.33.xx.xx port 12616 on 10.10.10.xx port 22 [[rdomain]] ""
 
  May 07 15:55:00 SERVER sshd[1870524]: Connection from 23.33.xx.xx port 12616 on 10.10.10.xx port 22 [[rdomain]] ""
  

Revision as of 09:31, 19 May 2020

wikipedia:Secure file transfer program

Binaries

  • /usr/lib/sftp-server

`

Activities

Logs

This service allows sftp connections only.


Example of failed login:

May 07 15:28:06 SERVER sshd[1869802]: Connection closed by authenticating user USERNAME 23.33.xx.xx port 12547 [preauth]

Example of failed login with verbose mode:

May 07 15:55:01 SERVER sshd[1870524]: Failed none for  USERNAME  from 23.33.xx.xx port 12616 ssh2
May 07 15:55:01 SERVER sshd[1870524]: Failed publickey for  USERNAME  from 23.33.xx.xx port 12616 ssh2: RSA SHA256:tAkCKfvCmOTpVeceSyAOy9Sjyp213hQ7RLTyKUaNw12
May 07 15:55:00 SERVER sshd[1870524]: Connection from 23.33.xx.xx port 12616 on 10.10.10.xx port 22 rdomain ""



Example of successfully session:

May 07 15:35:07 SERVER sshd[1870236]: Accepted publickey for USER from xx.xx.xx.xx port 60249 ssh2: ED25519 SHA256:EPEztZnnCh/fPqJ5wlgXUYMMx+LOOIegGdF76galaXw
May 07 15:35:07 SERVER sshd[1870236]: pam_unix(sshd:session): session opened for user USER by (uid=0)
May 07 15:35:07 SERVER systemd-logind[2350]: New session 2668 of user USER.
May 07 15:35:07 SERVER systemd[1]: Started Session 2668 of user USER.

Related terms

See also

Advertising: