[SLE] Think I've been cracked... not certain

From: C Hamel (vgm2_at_sc2000.net)
Date: 07/30/04

  • Next message: Jack Malone: "Re: [SLE] new setiathome boinc" 
    To: suse-linux-e@suse.com
Date: Thu, 29 Jul 2004 21:16:38 -0500

    I have never before seen this. I have the firewall engaged. Not certain what
    ot make of it. All I know is that my internet connection went down the last
    two times of the three this happened , and has been a little flakey all day
    long.
    ====
    Jul 29 05:30:53 linux sshd[6054]: Illegal user test from 163.19.207.248
    Jul 29 05:30:53 linux sshd[6054]: input_userauth_request: illegal user test
    Jul 29 05:30:53 linux sshd[6054]: Failed password for illegal user test from
    163.19.207.248 port 55657 ssh2
    Jul 29 05:30:53 linux sshd[6054]: Received disconnect from 163.19.207.248: 11:
    Bye Bye
    Jul 29 05:30:59 linux sshd[6055]: Illegal user guest from 163.19.207.248
    Jul 29 05:30:59 linux sshd[6055]: input_userauth_request: illegal user guest
    Jul 29 05:30:59 linux sshd[6055]: Failed password for illegal user guest from
    163.19.207.248 port 55662 ssh2
    Jul 29 05:31:00 linux sshd[6055]: Received disconnect from 163.19.207.248: 11:
    Bye Bye 

    -- 
...CH
"The more they over-think the plumbing,
the easier it is to stop up the drain."
			Scotty
-- 
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@suse.com
  • Next message: Jack Malone: "Re: [SLE] new setiathome boinc"

    Relevant Pages

    • Sind das Angriffe?
      ... Jan 16 06:44:22 micky sshd: Failed password for proxy from 38.97.212.172 port 52993 ssh2 ...
      (de.comp.security.firewall)
    • Attempt to breakin
      ... port 42989 ssh2 ... Jul 6 21:37:53 findmoore sshd: Failed password for root from ...
      (comp.os.linux.networking)
    • Grafting a SSH auto-drop chain onto Arnos 1.8.3-RC1
      ... Mar 21 13:16:06 gateway sshd: Failed password for illegal user ... anonymous from 213.64.252.243 port 59768 ssh2 ...
      (comp.os.linux.security)
    • Enforce SSH Login Delay
      ... ::ffff:211.171.191.106 port 11328 ssh2 ... Dec 10 13:18:28 turf sshd: Failed password for root from ...
      (comp.os.linux.misc)
    • Re: blocking IPs that try to crack SSH, is portsentry what I want?
      ... > Failed password for illegal user webmaster from ... ... IIRC Port Sentry operates by blocking connections to ports that are ... However it will not stop connections to ports where services are listening. ...
      (Debian-User)