Break-in Attempts

Kurt Wall kwall
Sun Jan 8 14:33:05 PST 2006


Someone is trying really lamely to break into my box using a dictionary
attack. I have 2280 of these in my logs:

sshd[24079]: Invalid user patrick from 220.163.44.81 
sshd[24083]: Invalid user patrick from 220.163.44.81
sshd[25460]: Invalid user fluffy from 202.142.105.78
sshd[25464]: Invalid user admin from 202.142.105.78

And 2504 of these:

sshd[24075]: Failed password for nobody from 220.163.44.81 port 49155 ssh2
sshd[24079]: Failed password for invalid user patrick from 220.163.44.81 port 49195 ssh2
sshd[24083]: Failed password for invalid user patrick from 220.163.44.81 port 49225 ssh2

But only 270 of these:

sshd[6667]: Address 195.226.181.130 maps to www.vipbusiness.de, but this does not map back to the address - POSSIBLE BREAKIN ATTEMPT!
sshd[6695]: Address 195.226.181.130 maps to www.vipbusiness.de, but this does not map back to the address - POSSIBLE BREAKIN ATTEMPT!
sshd[6731]: Address 195.226.181.130 maps to www.vipbusiness.de, but this does not map back to the address - POSSIBLE BREAKIN ATTEMPT!

Jerks. Children.

Kurt
-- 
What this country needs is a dime that will buy a good five-cent bagel.


More information about the Linux-users mailing list