Security Incidents mailing list archives

'fatal:' sshd log message

From: venglin () FREEBSD LUBLIN PL (Przemyslaw Frasunek)
Date: Sat, 25 Mar 2000 17:31:07 +0100


Mar 25 17:28:28 lagoon sshd[58826]: Starting daemon in inetd mode.
Mar 25 17:28:28 lagoon sshd[58826]: connection from "212.160.37.131"
Mar 25 17:28:28 lagoon sshd[58826]: Daemon is running.
Mar 25 17:28:28 lagoon sshd[58829]: Daemon is running.
Mar 25 17:28:29 lagoon sshd[58829]: log: Generating 512 bit RSA key.
Mar 25 17:28:29 lagoon sshd[58829]: log: RSA key generation complete.
Mar 25 17:28:29 lagoon sshd[58829]: log: Connection from 212.160.37.131 port 932
Mar 25 17:29:01 lagoon sshd[58829]: fatal:

Empty 'fatal' is quite strange behaviour. I've never seen it before. I'm using
SSH-1.99-2.0.13 (non-commercial) on FreeBSD 3.4-STABLE.

Any ideas?

--
* Fido: 2:480/124 ** WWW: http://www.freebsd.lublin.pl ** NIC-HDL: PMF9-RIPE *
* Inet: venglin () freebsd lublin pl ** PGP: D48684904685DF43  EA93AFA13BE170BF *

Current thread:

Re: Cracked by the Brazilians, (continued)
- - - Re: Cracked by the Brazilians Michael H. Warfield (Mar 30)
    - Re: Cracked by the Brazilians Omachonu Ogali (Mar 30)
    - Re: Cracked by the Brazilians Blaise St-Laurent (Mar 30)
    - Re: Cracked by the Brazilians Ralf Spenneberg (Mar 30)
    - Re: Cracked by the Brazilians Seth Milder (Mar 30)
    - link-local IPs (Was "Re: 169.254.x.x (Dramatic increase in UDP Port 137 (NetBIOS Name Service) probe activity)") Richard Johnson (Mar 30)
    - unapproved queries for "aol.com" Francis A. Vidal (Mar 26)
    - Linux-box hacked, ls, ps, login modified Frank Derichsweiler (Mar 22)
    - Re: Linux-box hacked, ls, ps, login modified Rick Tait (Mar 22)
    - Re: Linux-box hacked, ls, ps, login modified Granquist, Lamont (Mar 24)
    - 'fatal:' sshd log message Przemyslaw Frasunek (Mar 25)
    - sgi-dgl scanning Michael Stone (Mar 27)
    - unusual mail file Donald McLachlan (Mar 28)
    - Re: unusual mail file Ryan Hilton (Mar 28)
    - Front Page Extensions vventura () SIA PT (Mar 28)
    - Re: sgi-dgl scanning E. Larry Lidz (Mar 28)
    - Syn attacks ? Klavs Klavsen (Mar 28)
    - Re: lots of interest in port 109 (POP2) markus tromday (Mar 22)
- Re: lots of interest in port 109 (POP2) Donald McLachlan (Mar 07)
  - Re: lots of interest in port 109 (POP2) Paul Rice (Mar 13)
  - Munged Napster Sessions Stephen P. Berry (Mar 13)

(Thread continues...)