rosv
December 16th, 2008, 12:51 PM
Hi,
Like everyone else, I'm getting a lot of brute force traffic to my ssh server.
Usually my auth log is full of "Failed password for invalid user..." but occasionally I get few "Failed keyboard-interactive/pam...". I'm just currious but what does the second type mean?
Example from my log:
Dec 16 14:09:39 xxx sshd[9486]: Failed password for invalid user ccit from 202.169.30.25 port 47715 ssh2
Dec 16 14:09:40 xxx sshd[9484]: Failed keyboard-interactive/pam for invalid user moesha from 211.154.254.89 port 3310 ssh2
Thanx
Like everyone else, I'm getting a lot of brute force traffic to my ssh server.
Usually my auth log is full of "Failed password for invalid user..." but occasionally I get few "Failed keyboard-interactive/pam...". I'm just currious but what does the second type mean?
Example from my log:
Dec 16 14:09:39 xxx sshd[9486]: Failed password for invalid user ccit from 202.169.30.25 port 47715 ssh2
Dec 16 14:09:40 xxx sshd[9484]: Failed keyboard-interactive/pam for invalid user moesha from 211.154.254.89 port 3310 ssh2
Thanx