This file is indexed.

/etc/logcheck/ignore.d.server/scponly is in logcheck-database 1.3.14.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

1
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ scponly\[[0-9]+\]: running: (/(usr/)?bin/(ls|chmod|chown|chgrp|mkdir|rmdir|scp|ln|mv|rm|groups|pwd|echo|passwd)|cd|/usr/lib/sftp-server).* \(username: [._[:alnum:]-]+\([0-9]+\), IP/port: [.:[:alnum:]]+ [0-9]+ 22\)$