[eSlack] Log atacante

[Andy .]

si no  usas ssh desactivalo /etc/rc.d/rc.sshd stop
si kieres desactivarlo permanentemente es chmod -x /etc/rc.d/rc.sshd
o si no ponte una contraseña  de mas de 15 digitos o mas asi te aseguras de
k no conseguiran nada..

2006/11/26, Nach0 <guidoignacio en gmail.com>:
>
> Estimados miren este log, veo que estan contantemente intentado ingresar
> por ssh desde la direccion 200.43.60.114, tengo un firewall corriendo pero
> sigue ocurriendo
> Que puede ser?
>
>
>  26 15:25:24 LinuX sshd[4157]: Illegal user user2 from ::ffff:
> 200.43.60.114
> Nov 26 15:25:24 LinuX sshd[4157]: Failed password for illegal user user2
> from ::ffff: 200.43.60.114 port 48334 ssh2
> Nov 26 15:25:26 LinuX sshd[4159]: Illegal user ftp2 from ::ffff:
> 200.43.60.114
> Nov 26 15:25:26 LinuX sshd[4159]: Failed password for illegal user ftp2
> from ::ffff: 200.43.60.114 port 48367 ssh2
> Nov 26 15:25:28 LinuX sshd[4161]: Illegal user ftpuser from ::ffff:
> 200.43.60.114
> Nov 26 15:25:28 LinuX sshd[4161]: Failed password for illegal user ftpuser
> from ::ffff: 200.43.60.114 port 48402 ssh2
> Nov 26 15:25:31 LinuX sshd[4163]: Illegal user ftp-user from ::ffff:
> 200.43.60.114
> Nov 26 15:25:31 LinuX sshd[4163]: Failed password for illegal user
> ftp-user from ::ffff: 200.43.60.114 port 48435 ssh2
> Nov 26 15:25:33 LinuX sshd[4165]: Illegal user vpn from ::ffff:
> 200.43.60.114
> Nov 26 15:25:33 LinuX sshd[4165]: Failed password for illegal user vpn
> from ::ffff: 200.43.60.114 port 48467 ssh2
> Nov 26 15:25:36 LinuX sshd[4167]: Illegal user gabriel from ::ffff:
> 200.43.60.114
> Nov 26 15:25:36 LinuX sshd[4167]: Failed password for illegal user gabriel
> from ::ffff: 200.43.60.114 port 48501 ssh2
> Nov 26 15:25:38 LinuX sshd[4169]: Illegal user gary from ::ffff:
> 200.43.60.114
> Nov 26 15:25:38 LinuX sshd[4169]: Failed password for illegal user gary
> from ::ffff: 200.43.60.114 port 48533 ssh2
>
>
> _______________________________________________
> eSlack mailing list
> eSlack en lists.eslack.org
> http://lists.eslack.org/mailman/listinfo/eslack
>
>
>
------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: http://lists.eslack.org/pipermail/eslack/attachments/20061126/322672d0/attachment.htm