strange message in logs, ssh breakin?

Lowell Gilbert freebsd-questions-local at be-well.ilk.org
Thu Mar 9 14:46:27 UTC 2006


"Dave" <dmehler26 at woh.rr.com> writes:

> Hello,
>     I've recently started seeing this in my security logs. This is on
> a freebsd6 box. Is this some kind of hack atempt?
> Thanks.
> Dave.
> 
> Mar  5 12:16:59 zeus sshd[33617]: login_getclass: unknown class 'root'
> Mar  5 12:17:03 zeus sshd[33621]: login_getclass: unknown class 'root'
> Mar  5 12:18:02 zeus sshd[33622]: fatal: Timeout before authentication
> for 195.225.129.68

By default, sshd won't allow root to log in.  Also by default, root
uses the "root" login class in login.conf (which exists by default).  

Make sure that those defaults are still present, unless you know
exactly why you want to change them.


More information about the freebsd-questions mailing list