全球主机交流论坛

标题: 接到巴斯的警告。。空的巴斯vps [打印本页]

作者: hnspzwy    时间: 2010-4-17 12:08
标题: 接到巴斯的警告。。空的巴斯vps
nnd  空的vps也有人搞。。

Hello,
It appears that someone on one of your hosts attempted to break in to one of my hosts. I've attached the relevant log entries below, all times are in US/Central. Please investigate and take appropriate action...

Thanks!
Pat

Apr 16 14:19:59 notanut sshd[16392]: Did not receive identification string from 66.197.184.224
Apr 16 14:24:42 notanut sshd[17924]: Invalid user user from 66.197.184.224
Apr 16 14:24:42 notanut sshd[17924]: reverse mapping checking getaddrinfo for 66-197-184-224.hostnoc.net failed - POSSIBLE BREAK-IN ATTEMPT!
Apr 16 14:24:42 notanut sshd[17925]: Received disconnect from 66.197.184.224: 11: Bye Bye
Apr 16 14:24:43 notanut sshd[17926]: Invalid user test from 66.197.184.224
Apr 16 14:24:43 notanut sshd[17926]: reverse mapping checking getaddrinfo for 66-197-184-224.hostnoc.net failed - POSSIBLE BREAK-IN ATTEMPT!
Apr 16 14:24:43 notanut sshd[17927]: Received disconnect from 66.197.184.224: 11: Bye Bye
Apr 16 14:24:43 notanut sshd[17928]: Invalid user guest from 66.197.184.224
Apr 16 14:24:43 notanut sshd[17928]: reverse mapping checking getaddrinfo for 66-197-184-224.hostnoc.net failed - POSSIBLE BREAK-IN ATTEMPT!
Apr 16 14:24:43 notanut sshd[17929]: Received disconnect from 66.197.184.224: 11: Bye Bye
Apr 16 14:24:44 notanut sshd[17930]: Invalid user oracle from 66.197.184.224
Apr 16 14:24:44 notanut sshd[17930]: reverse mapping checking getaddrinfo for 66-197-184-224.hostnoc.net failed - POSSIBLE BREAK-IN ATTEMPT!
Apr 16 14:24:44 notanut sshd[17931]: Received disconnect from 66.197.184.224: 11: Bye Bye
Apr 16 14:24:45 notanut sshd[17932]: reverse mapping checking getaddrinfo for 66-197-184-224.hostnoc.net failed - POSSIBLE BREAK-IN ATTEMPT!
Apr 16 14:24:45 notanut sshd[17933]: Received disconnect from 66.197.184.224: 11: Bye Bye
作者: renothing    时间: 2010-4-17 12:10
太幽默了....
作者: cnx    时间: 2010-4-17 12:15

作者: shinko    时间: 2010-4-17 12:15
像你這麼拉風的男人..沒人要的女人都被人搞的
作者: ccy136    时间: 2010-4-17 12:22

作者: shy9000    时间: 2010-4-17 12:54
呵呵,不会是以前用这个ip的人和谁有仇吧?
作者: afterx    时间: 2010-4-17 13:01

作者: hnspzwy    时间: 2010-4-17 13:15
改了SSH端口。。。估计谁无聊穷举呢~
作者: greensnow    时间: 2010-4-17 13:46
巴斯还挺负责的
作者: 6700    时间: 2010-4-17 14:06
装软件ban他们




欢迎光临 全球主机交流论坛 (https://fd.vvwvv.eu.org/) Powered by Discuz! X3.4