auth.log

On a good server SCP was used to retrieve a remote compressed file. This was saved to the root directory. Thereafter key based authentication stopped