Attacco di Brute force?
da questa mattina ho i log pieni di questi escrementi qui sotto... :-)
dite si tratta di un worm o di una persona?
Mi sembra ricordare che c'era un pacchetto che droppava questo tipo di connessione dopo un certo numero di tentativi per un certo periodo.
avete una pista da darmi?
ciao
MaX
Security Events
=-=-=-=-=-=-=-=
Sep 23 13:41:11 server2 sshd[13060]: Failed password for illegal user 1 from 65.69.189.225 port 55628 ssh2
Sep 23 13:41:15 server2 sshd[13062]: Failed password for illegal user a from 65.69.189.225 port 55766 ssh2
Sep 23 13:41:19 server2 sshd[13067]: Failed password for illegal user a from 65.69.189.225 port 55891 ssh2
Sep 23 13:41:23 server2 sshd[13069]: Failed password for illegal user abuse from 65.69.189.225 port 56006 ssh2
Sep 23 13:41:27 server2 sshd[13071]: Failed password for illegal user abuse from 65.69.189.225 port 56129 ssh2
Sep 23 13:41:31 server2 sshd[13075]: Failed password for illegal user abuse from 65.69.189.225 port 56253 ssh2
Sep 23 13:41:35 server2 sshd[13077]: Failed password for illegal user academia from 65.69.189.225 port 56362 ssh2
Sep 23 13:41:39 server2 sshd[13081]: Failed password for illegal user academia from 65.69.189.225 port 56488 ssh2
Sep 23 13:41:43 server2 sshd[13083]: Failed password for illegal user academia from 65.69.189.225 port 56600 ssh2
Sep 23 13:41:46 server2 sshd[13085]: Failed password for illegal user academic from 65.69.189.225 port 56711 ssh2
Sep 23 13:41:50 server2 sshd[13090]: Failed password for illegal user academic from 65.69.189.225 port 56826 ssh2
Sep 23 13:41:54 server2 sshd[13092]: Failed password for illegal user academic from 65.69.189.225 port 56945 ssh2
Sep 23 13:41:58 server2 sshd[13094]: Failed password for illegal user ada from 65.69.189.225 port 57061 ssh2
Sep 23 13:42:02 server2 sshd[13098]: Failed password for illegal user ada from 65.69.189.225 port 57192 ssh2
Sep 23 13:42:06 server2 sshd[13100]: Failed password for illegal user ada from 65.69.189.225 port 57312 ssh2
Sep 23 13:42:13 server2 sshd[13104]: Failed password for illegal user adams from 65.69.189.225 port 57427 ssh2
Sep 23 13:42:16 server2 sshd[13106]: Failed password for illegal user adams from 65.69.189.225 port 57539 ssh2
Sep 23 13:42:20 server2 sshd[13110]: Failed password for illegal user adams from 65.69.189.225 port 57645 ssh2
Sep 23 13:42:24 server2 sshd[13112]: Failed password for illegal user adating from 65.69.189.225 port 57758 ssh2
Sep 23 13:42:29 server2 sshd[13115]: Failed password for illegal user adating from 65.69.189.225 port 57865 ssh2
Sep 23 13:42:33 server2 sshd[13118]: Failed password for illegal user adating from 65.69.189.225 port 57971 ssh2
Sep 23 13:42:37 server2 sshd[13120]: Failed password for illegal user adm from 65.69.189.225 port 58088 ssh2
Sep 23 13:42:41 server2 sshd[13128]: Failed password for illegal user adm from 65.69.189.225 port 58198 ssh2
Sep 23 13:42:44 server2 sshd[13131]: Failed password for illegal user adm from 65.69.189.225 port 58321 ssh2
Sep 23 13:42:48 server2 sshd[13134]: Illegal user admin from 65.69.189.225
Sep 23 13:42:48 server2 sshd[13134]: Failed password for illegal user admin from 65.69.189.225 port 58438 ssh2
Sep 23 13:42:52 server2 sshd[13138]: Illegal user admin from 65.69.189.225
Sep 23 13:42:52 server2 sshd[13138]: Failed password for illegal user admin from 65.69.189.225 port 58547 ssh2
Sep 23 13:42:56 server2 sshd[13140]: Illegal user admin from 65.69.189.225
Sep 23 13:42:56 server2 sshd[13140]: Failed password for illegal user admin from 65.69.189.225 port 58668 ssh2
Sep 23 13:43:00 server2 sshd[13146]: Failed password for illegal user administrator from 65.69.189.225 port 58792 ssh2
Sep 23 13:43:04 server2 sshd[13149]: Failed password for illegal user administrator from 65.69.189.225 port 58903 ssh2
______________________________________________
Renovamos el Correo Yahoo!
Nuevos servicios, más seguridad
http://correo.yahoo.es
Reply to: