da questa mattina ho i log pieni di questi escrementi qui sotto... :-)
dite si tratta di un worm o di una persona?
Mi sembra ricordare che c'era un pacchetto che droppava questo tipo di
connessione dopo un certo numero di tentativi per un certo periodo.
avete una pista da darmi?
ciao
MaX
Security Events
=-=-=-=-=-=-=-=
Sep 23 13:41:11 server2 sshd[13060]: Failed password for illegal user 1 from
65.69.189.225 port 55628 ssh2
Sep 23 13:41:15 server2 sshd[13062]: Failed password for illegal user a from
65.69.189.225 port 55766 ssh2
Sep 23 13:41:19 server2 sshd[13067]: Failed password for illegal user a from
65.69.189.225 port 55891 ssh2
Sep 23 13:41:23 server2 sshd[13069]: Failed password for illegal user abuse
from 65.69.189.225 port 56006 ssh2
Sep 23 13:41:27 server2 sshd[13071]: Failed password for illegal user abuse
from 65.69.189.225 port 56129 ssh2
Sep 23 13:41:31 server2 sshd[13075]: Failed password for illegal user abuse
from 65.69.189.225 port 56253 ssh2
Sep 23 13:41:35 server2 sshd[13077]: Failed password for illegal user academia
from 65.69.189.225 port 56362 ssh2
Sep 23 13:41:39 server2 sshd[13081]: Failed password for illegal user academia
from 65.69.189.225 port 56488 ssh2
Sep 23 13:41:43 server2 sshd[13083]: Failed password for illegal user academia
from 65.69.189.225 port 56600 ssh2
Sep 23 13:41:46 server2 sshd[13085]: Failed password for illegal user academic
from 65.69.189.225 port 56711 ssh2
Sep 23 13:41:50 server2 sshd[13090]: Failed password for illegal user academic
from 65.69.189.225 port 56826 ssh2
Sep 23 13:41:54 server2 sshd[13092]: Failed password for illegal user academic
from 65.69.189.225 port 56945 ssh2
Sep 23 13:41:58 server2 sshd[13094]: Failed password for illegal user ada from
65.69.189.225 port 57061 ssh2
Sep 23 13:42:02 server2 sshd[13098]: Failed password for illegal user ada from
65.69.189.225 port 57192 ssh2
Sep 23 13:42:06 server2 sshd[13100]: Failed password for illegal user ada from
65.69.189.225 port 57312 ssh2
Sep 23 13:42:13 server2 sshd[13104]: Failed password for illegal user adams
from 65.69.189.225 port 57427 ssh2
Sep 23 13:42:16 server2 sshd[13106]: Failed password for illegal user adams
from 65.69.189.225 port 57539 ssh2
Sep 23 13:42:20 server2 sshd[13110]: Failed password for illegal user adams
from 65.69.189.225 port 57645 ssh2
Sep 23 13:42:24 server2 sshd[13112]: Failed password for illegal user adating
from 65.69.189.225 port 57758 ssh2
Sep 23 13:42:29 server2 sshd[13115]: Failed password for illegal user adating
from 65.69.189.225 port 57865 ssh2
Sep 23 13:42:33 server2 sshd[13118]: Failed password for illegal user adating
from 65.69.189.225 port 57971 ssh2
Sep 23 13:42:37 server2 sshd[13120]: Failed password for illegal user adm from
65.69.189.225 port 58088 ssh2
Sep 23 13:42:41 server2 sshd[13128]: Failed password for illegal user adm from
65.69.189.225 port 58198 ssh2
Sep 23 13:42:44 server2 sshd[13131]: Failed password for illegal user adm from
65.69.189.225 port 58321 ssh2
Sep 23 13:42:48 server2 sshd[13134]: Illegal user admin from 65.69.189.225
Sep 23 13:42:48 server2 sshd[13134]: Failed password for illegal user admin
from 65.69.189.225 port 58438 ssh2
Sep 23 13:42:52 server2 sshd[13138]: Illegal user admin from 65.69.189.225
Sep 23 13:42:52 server2 sshd[13138]: Failed password for illegal user admin
from 65.69.189.225 port 58547 ssh2
Sep 23 13:42:56 server2 sshd[13140]: Illegal user admin from 65.69.189.225
Sep 23 13:42:56 server2 sshd[13140]: Failed password for illegal user admin
from 65.69.189.225 port 58668 ssh2
Sep 23 13:43:00 server2 sshd[13146]: Failed password for illegal user
administrator from 65.69.189.225 port 58792 ssh2
Sep 23 13:43:04 server2 sshd[13149]: Failed password for illegal user
administrator from 65.69.189.225 port 58903 ssh2
______________________________________________
Renovamos el Correo Yahoo!
Nuevos servicios, más seguridad
http://correo.yahoo.es
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
