http://denyhosts.sourceforge.net Thus saith Barış KARAGÜL : > Merhabalar. Debian web sunucuma sürekli ssh login denemeleri yapılıyor. > IP adreslerini araştırdığımda farklı ülkelere ait olduğunu > görüyorum. Acaba bu denemeler otomatik solucan tarzı bir program > tarafından mı yapılıyor? Ssh sunucumu 3 denemeden sonra o ip adresini > banlamasını sağlayabilir miyim? Güvenlik amacıyla ssh sunucumu nasıl > ayarlamalıyom ki bu sunucuya sadece diskete veya flash belleğe > yüklediğim key ile bağlanabileyim? > > auth.log kayıtları şöyle: > > Jan 7 16:17:30 elektron sshd[4187]: Illegal user dan from > ::ffff:202.46.253.130 > Jan 7 16:17:36 elektron sshd[4189]: Illegal user james from > ::ffff:202.46.253.130 > Jan 7 16:17:42 elektron sshd[4191]: Illegal user snort from > ::ffff:202.46.253.130 > Jan 7 16:17:48 elektron sshd[4193]: Illegal user radiomail from > ::ffff:202.46.253.130 > Jan 7 16:17:54 elektron sshd[4195]: Illegal user harrypotter from > ::ffff:202.46.253.130 > Jan 7 16:17:59 elektron sshd[4197]: Illegal user divine from > ::ffff:202.46.253.130 > Jan 7 16:18:05 elektron sshd[4199]: Illegal user popa3d from > ::ffff:202.46.253.130 > Jan 7 16:18:11 elektron sshd[4201]: Illegal user aptproxy from > ::ffff:202.46.253.130 > Jan 7 16:18:20 elektron sshd[4203]: Illegal user desktop from > ::ffff:202.46.253.130 > Jan 7 16:18:27 elektron sshd[4205]: Illegal user workshop from > ::ffff:202.46.253.130 > Jan 7 16:18:33 elektron sshd[4207]: Illegal user mailnull from > ::ffff:202.46.253.130 > Jan 7 16:18:39 elektron sshd[4209]: Illegal user nfsnobody from > ::ffff:202.46.253.130 > Jan 7 16:18:45 elektron sshd[4211]: Illegal user rpcuser from > ::ffff:202.46.253.130 > Jan 7 16:18:50 elektron sshd[4213]: Illegal user rpc from > ::ffff:202.46.253.130 > Jan 7 16:18:57 elektron sshd[4215]: Illegal user gopher from > ::ffff:202.46.253.130 > > İyi çalışmalar... > > > -- > To UNSUBSCRIBE, email to debian-user-turkish-REQUEST@lists.debian.org > with a subject of "unsubscribe". Trouble? Contact > listmaster@lists.debian.org -- Sevgi Saygı GNU/Linux ######################################################################## System going down in 5 minutes. ######################################################################## Tonguç Yumruk
Attachment:
signature.asc
Description: Digital signature