Secure file transfer program (sftp)

From wikieduonline
Revision as of 07:39, 23 July 2020 by Welcome (talk | contribs) (→‎Logs)
Jump to navigation Jump to search

Binaries

  • /usr/lib/sftp-server

Activities

Logs

journalctl -u ssh
This service allows sftp connections only.

Example of failed login:

May 07 15:28:06 SERVER sshd[1869802]: Connection closed by authenticating user USERNAME 23.33.xx.xx port 12547 [preauth]

Example of failed login with verbose mode, see (sshd logs):

May 07 15:55:01 SERVER sshd[1870524]: Failed none for  USERNAME  from 23.33.xx.xx port 12616 ssh2
May 07 15:55:01 SERVER sshd[1870524]: Failed publickey for  USERNAME  from 23.33.xx.xx port 12616 ssh2: RSA SHA256:tAkCKfvCmOTpVeceSyAOy9Sjyp213hQ7RLTyKUaNw12
May 07 15:55:00 SERVER sshd[1870524]: Connection from 23.33.xx.xx port 12616 on 10.10.10.xx port 22 rdomain ""

Example of successfully session:

May 07 15:35:07 SERVER sshd[1870236]: Accepted publickey for USER from xx.xx.xx.xx port 60249 ssh2: ED25519 SHA256:EPEztZnnCh/fPqJ5wlgXUYMMx+LOOIegGdF76galaXw
May 07 15:35:07 SERVER sshd[1870236]: pam_unix(sshd:session): session opened for user USER by (uid=0)
May 07 15:35:07 SERVER systemd-logind[2350]: New session 2668 of user USER.
May 07 15:35:07 SERVER systemd[1]: Started Session 2668 of user USER.

Related terms

See also

Advertising: