OpenBSD authlog

31/10/2009 - 18:18 von Jörg Klein | Report spam
Hallo,

bei der Durchsicht meiner log files ist mir folgendes aufgefallen: Kann mir
das jemand erklàren?
Das log file wàchst und wàchst.

Gruß Jörg

Oct 31 18:10:44 data sshd[30260]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:10:49 data sshd[1766]: Failed password for root from
211.141.237.36 port 38194 ssh2
Oct 31 18:10:49 data sshd[19028]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:10:53 data sshd[13941]: Failed password for root from
211.141.237.36 port 38439 ssh2
Oct 31 18:10:54 data sshd[3053]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:10:58 data sshd[20882]: Failed password for root from
211.141.237.36 port 38690 ssh2
Oct 31 18:10:59 data sshd[30387]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:11:03 data sshd[719]: Failed password for root from 211.141.237.36
port 38944 ssh2
Oct 31 18:11:03 data sshd[31558]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:11:07 data sshd[18337]: Failed password for root from
211.141.237.36 port 39194 ssh2
Oct 31 18:11:08 data sshd[15753]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:11:12 data sshd[8645]: Failed password for root from
211.141.237.36 port 39444 ssh2
Oct 31 18:11:13 data sshd[19838]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:11:17 data sshd[8324]: Failed password for root from
211.141.237.36 port 39702 ssh2
Oct 31 18:11:18 data sshd[5749]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:11:22 data sshd[13791]: Failed password for root from
211.141.237.36 port 39949 ssh2
Oct 31 18:11:22 data sshd[5359]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:11:27 data sshd[2326]: Failed password for root from
211.141.237.36 port 40207 ssh2
Oct 31 18:11:28 data sshd[25726]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:11:32 data sshd[14343]: Failed password for root from
211.141.237.36 port 40485 ssh2
Oct 31 18:11:33 data sshd[9388]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:11:37 data sshd[16956]: Failed password for root from
211.141.237.36 port 40758 ssh2
Oct 31 18:11:38 data sshd[26215]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:11:42 data sshd[24525]: Failed password for root from
211.141.237.36 port 41011 ssh2
 

Lesen sie die antworten

#1 Toni Grass
31/10/2009 - 18:46 | Warnen spam
"Jörg Klein" wrote:
Hallo,

bei der Durchsicht meiner log files ist mir folgendes aufgefallen: Kann mir
das jemand erklàren?
Das log file wàchst und wàchst.

Gruß Jörg

Oct 31 18:10:44 data sshd[30260]: Received disconnect from 211.141.237.36:
11: Bye Bye
Oct 31 18:10:49 data sshd[1766]: Failed password for root from
211.141.237.36 port 38194 ssh2


[...]

Jemand aus China möchte sich als Root am Rechner einloggen. Wenn der
Kerl hartnàckig ist, dann ist das wohl ein Script. Oder was meintest Du
mit 'Kann mir das jemand erklàren'?

inetnum: 211.141.160.0 - 211.141.255.255
netname: CMNET-anhui
descr: China Mobile Communications Corporation - anhui company
...

Toni

Ähnliche fragen