Failed SSH login attempts on SPARC Enterprise M3000/M4000/M5000/M8000/M9000 (OPL) Servers domain(s) coming from XSCF(s)

(Doc ID 1507710.1)

Last updated on SEPTEMBER 29, 2017

Applies to:

Sun SPARC Enterprise M4000 Server - Version All Versions and later
Sun SPARC Enterprise M5000 Server - Version All Versions and later
Sun SPARC Enterprise M8000 Server - Version All Versions and later
Sun SPARC Enterprise M9000-64 Server - Version All Versions and later
Sun SPARC Enterprise M3000 Server - Version All Versions and later
Information in this document applies to any platform.

Symptoms

It may happen on SPARC Enterprise M3000/M4000/M5000/M8000/M9000 (OPL) Servers domain(s) that messages and/or console logs do report failed ssh login attempts by root user; upon verification, the source addresses are found to be the public IPs of XSCF(s).

Example of console logs found on M8000 domain:

so the "offending" source IP address belong to public interfaces of XSCF located on different Mx000 platforms.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms