Break-in Attempts
Kurt Wall
kwall
Sun Jan 8 14:33:05 PST 2006
Someone is trying really lamely to break into my box using a dictionary
attack. I have 2280 of these in my logs:
sshd[24079]: Invalid user patrick from 220.163.44.81
sshd[24083]: Invalid user patrick from 220.163.44.81
sshd[25460]: Invalid user fluffy from 202.142.105.78
sshd[25464]: Invalid user admin from 202.142.105.78
And 2504 of these:
sshd[24075]: Failed password for nobody from 220.163.44.81 port 49155 ssh2
sshd[24079]: Failed password for invalid user patrick from 220.163.44.81 port 49195 ssh2
sshd[24083]: Failed password for invalid user patrick from 220.163.44.81 port 49225 ssh2
But only 270 of these:
sshd[6667]: Address 195.226.181.130 maps to www.vipbusiness.de, but this does not map back to the address - POSSIBLE BREAKIN ATTEMPT!
sshd[6695]: Address 195.226.181.130 maps to www.vipbusiness.de, but this does not map back to the address - POSSIBLE BREAKIN ATTEMPT!
sshd[6731]: Address 195.226.181.130 maps to www.vipbusiness.de, but this does not map back to the address - POSSIBLE BREAKIN ATTEMPT!
Jerks. Children.
Kurt
--
What this country needs is a dime that will buy a good five-cent bagel.
More information about the Linux-users
mailing list