Antar att detta är ett försök att komma in på min server.
Mitt linux kunnande är inte den bästa.
Ett litet utdrag från aut.log.0 (öppnade den av en slump, ingen anning om vad det är för fil :) )
Nov 14 16:46:17 localhost sshd[1758]: Invalid user aaa from ::ffff:217.160.254.182
Nov 14 16:46:18 localhost sshd[1760]: Invalid user qqq from ::ffff:217.160.254.182
Nov 14 16:46:19 localhost sshd[1762]: Invalid user www from ::ffff:217.160.254.182
fortsätter till:
Nov 14 17:08:11 localhost sshd[4017]: Invalid user xxxxxx from ::ffff:217.160.254.182
Nov 14 17:08:13 localhost sshd[4019]: Invalid user you from ::ffff:217.160.254.182
Nov 14 17:08:14 localhost sshd[4021]: Invalid user young from ::ffff:217.160.254.182
Är detta ett intrångsförsök och kan ja ta reda på vem det var?
Hur säker är min dator och hur kollar jag upp det?
Det där ser ut som ett antingen en riktad attack mot dig, alt. ett virus/intrångsprogram som söker efter sårbara datorer.
Du ser ip'n där, en tracert visar att ip'n tillhör ett webhosting-företag i Tyskland.
sshd är en sk daemon, eller bakgrundsservice, som tillhör ssh, somanvänds för fjärrstyrning av datorer. Kolla om det på¨någon rad står något annat än invalid user, då kan din dator ha haft intrång på riktigt, annars har den stått pall.
Inget som e riktat mot dig personligen... så här ser ett klipp från min log ut, själv har jag slutat skicka abuse mail, det tar helt enkelt för mycket tid. :/
Nov 24 16:57:12 "min dator" sshd[3530]: Invalid user anonymous from 61.139.126.117
Nov 24 16:57:16 "min dator" sshd[3535]: Invalid user passwd from 61.139.126.117
Nov 24 16:57:21 "min dator" sshd[3541]: Invalid user chuck from 61.139.126.117
Nov 24 16:57:27 "min dator" sshd[3546]: Invalid user darkman from 61.139.126.117
Nov 24 16:57:33 "min dator" sshd[3551]: Invalid user hostmaster from 61.139.126.117
Nov 24 16:57:37 "min dator" sshd[3556]: Invalid user jeffrey from 61.139.126.117
Nov 24 16:57:47 "min dator" sshd[3561]: Invalid user loverd from 61.139.126.117
Nov 24 16:57:57 "min dator" sshd[3567]: Did not receive identification string from 61.139.126.117
Nov 24 17:08:22 "min dator" sshd[3608]: Invalid user staff from 61.97.32.29
Nov 24 17:08:25 "min dator" sshd[3613]: Invalid user sales from 61.97.32.29
Nov 24 17:08:28 "min dator" sshd[3618]: Invalid user recruit from 61.97.32.29
Nov 24 17:08:35 "min dator" sshd[3628]: Invalid user office from 61.97.32.29
Nov 24 17:08:38 "min dator" sshd[3633]: Invalid user samba from 61.97.32.29
Nov 24 17:08:41 "min dator" sshd[3638]: Invalid user tomcat from 61.97.32.29
Nov 24 17:08:44 "min dator" sshd[3643]: Invalid user webadmin from 61.97.32.29
Nov 24 17:08:47 "min dator" sshd[3648]: Invalid user spam from 61.97.32.29
Nov 24 17:08:50 "min dator" sshd[3654]: Invalid user virus from 61.97.32.29
Nov 24 17:08:56 "min dator" sshd[3664]: Invalid user oracle from 61.97.32.29
Nov 24 17:09:00 "min dator" sshd[3669]: Invalid user michael from 61.97.32.29
Nov 24 17:09:06 "min dator" sshd[3679]: Invalid user test from 61.97.32.29
Nov 24 17:09:09 "min dator" sshd[3684]: Invalid user webmaster from 61.97.32.29
Nov 24 17:09:22 "min dator" sshd[3705]: Invalid user paul from 61.97.32.29
Nov 24 17:09:28 "min dator" sshd[3715]: User guest not allowed because shell /dev/null is not executable
Nov 24 17:09:31 "min dator" sshd[3720]: Invalid user admin from 61.97.32.29
Nov 24 17:09:34 "min dator" sshd[3725]: Invalid user linux from 61.97.32.29
Nov 24 17:09:38 "min dator" sshd[3730]: Invalid user user from 61.97.32.29
Nov 24 17:09:41 "min dator" sshd[3735]: Invalid user david from 61.97.32.29
Nov 24 17:09:44 "min dator" sshd[3740]: Invalid user web from 61.97.32.29
Nov 24 17:09:50 "min dator" sshd[3751]: Invalid user pgsql from 61.97.32.29
Nov 24 17:09:56 "min dator" sshd[3761]: Invalid user info from 61.97.32.29
Nov 24 17:09:59 "min dator" sshd[3766]: Invalid user tony from 61.97.32.29
Nov 24 17:10:02 "min dator" sshd[3771]: Invalid user core from 61.97.32.29
Nov 24 17:10:06 "min dator" sshd[3788]: Invalid user newsletter from 61.97.32.29
Nov 24 17:10:12 "min dator" sshd[3798]: Invalid user visitor from 61.97.32.29
Nov 24 17:10:15 "min dator" sshd[3803]: Invalid user ftpuser from 61.97.32.29
Nov 24 17:10:18 "min dator" sshd[3809]: Invalid user username from 61.97.32.29
Nov 24 17:10:21 "min dator" sshd[3814]: Invalid user administrator from 61.97.32.29
Nov 24 17:10:24 "min dator" sshd[3819]: Invalid user library from 61.97.32.29
Nov 24 17:10:28 "min dator" sshd[3824]: Invalid user test from 61.97.32.29
Nov 24 17:10:37 "min dator" sshd[3839]: Invalid user admin from 61.97.32.29
Nov 24 17:10:40 "min dator" sshd[3844]: User guest not allowed because shell /dev/null is not executable
Nov 24 17:10:43 "min dator" sshd[3849]: Invalid user master from 61.97.32.29
Nov 24 17:11:02 "min dator" sshd[3880]: Invalid user admin from 61.97.32.29
Nov 24 17:11:05 "min dator" sshd[3885]: Invalid user admin from 61.97.32.29
Nov 24 17:11:08 "min dator" sshd[3890]: Invalid user admin from 61.97.32.29
Nov 24 17:11:11 "min dator" sshd[3895]: Invalid user admin from 61.97.32.29
Nov 24 17:11:20 "min dator" sshd[3911]: Invalid user test from 61.97.32.29
Nov 24 17:11:23 "min dator" sshd[3916]: Invalid user test from 61.97.32.29
Nov 24 17:11:27 "min dator" sshd[3921]: Invalid user webmaster from 61.97.32.29
Nov 24 17:11:30 "min dator" sshd[3926]: Invalid user username from 61.97.32.29
Nov 24 17:11:33 "min dator" sshd[3931]: Invalid user user from 61.97.32.29
Nov 24 17:11:40 "min dator" sshd[3941]: Invalid user admin from 61.97.32.29
Nov 24 17:11:43 "min dator" sshd[3946]: Invalid user test from 61.97.32.29
Nov 24 17:11:55 "min dator" sshd[3967]: Invalid user danny from 61.97.32.29
Nov 24 17:11:58 "min dator" sshd[3972]: Invalid user alex from 61.97.32.29
Nov 24 17:12:02 "min dator" sshd[3977]: Invalid user brett from 61.97.32.29
Nov 24 17:12:05 "min dator" sshd[3982]: Invalid user mike from 61.97.32.29
Nov 24 17:12:08 "min dator" sshd[3987]: Invalid user alan from 61.97.32.29
Nov 24 17:12:11 "min dator" sshd[3992]: Invalid user data from 61.97.32.29
Nov 24 17:12:14 "min dator" sshd[3997]: Invalid user www-data from 61.97.32.29
Nov 24 17:12:17 "min dator" sshd[4002]: Invalid user http from 61.97.32.29
Nov 24 17:12:20 "min dator" sshd[4008]: Invalid user httpd from 61.97.32.29
Nov 24 17:12:24 "min dator" sshd[4013]: Invalid user pop from 61.97.32.29
Nov 24 17:12:33 "min dator" sshd[4028]: Invalid user backup from 61.97.32.29
Nov 24 17:12:36 "min dator" sshd[4033]: Invalid user info from 61.97.32.29
Nov 24 17:12:39 "min dator" sshd[4038]: Invalid user shop from 61.97.32.29
Nov 24 17:12:42 "min dator" sshd[4043]: Invalid user sales from 61.97.32.29
Nov 24 17:12:46 "min dator" sshd[4048]: Invalid user web from 61.97.32.29
Nov 24 17:12:49 "min dator" sshd[4054]: Invalid user www from 61.97.32.29
Nov 24 17:12:52 "min dator" sshd[4059]: Invalid user wwwrun from 61.97.32.29
Nov 24 17:12:55 "min dator" sshd[4064]: Invalid user adam from 61.97.32.29
Nov 24 17:12:58 "min dator" sshd[4069]: Invalid user stephen from 61.97.32.29
Nov 24 17:13:01 "min dator" sshd[4074]: Invalid user richard from 61.97.32.29
Nov 24 17:13:04 "min dator" sshd[4079]: Invalid user george from 61.97.32.29
Nov 24 17:13:08 "min dator" sshd[4084]: Invalid user john from 61.97.32.29
Nov 24 17:13:14 "min dator" sshd[4094]: Invalid user angel from 61.97.32.29
Nov 24 17:13:20 "min dator" sshd[4105]: Invalid user pgsql from 61.97.32.29
Nov 24 17:13:30 "min dator" sshd[4120]: Invalid user ident from 61.97.32.29
Nov 24 17:13:33 "min dator" sshd[4125]: Invalid user webpop from 61.97.32.29
Nov 24 17:13:36 "min dator" sshd[4130]: Invalid user susan from 61.97.32.29
Nov 24 17:13:39 "min dator" sshd[4135]: Invalid user sunny from 61.97.32.29
Nov 24 17:13:42 "min dator" sshd[4152]: Invalid user steven from 61.97.32.29
Nov 24 17:13:45 "min dator" sshd[4157]: Invalid user ssh from 61.97.32.29
Nov 24 17:13:49 "min dator" sshd[4163]: Invalid user search from 61.97.32.29
Nov 24 17:13:52 "min dator" sshd[4168]: Invalid user sara from 61.97.32.29
Nov 24 17:13:55 "min dator" sshd[4173]: Invalid user robert from 61.97.32.29
Nov 24 17:13:58 "min dator" sshd[4178]: Invalid user richard from 61.97.32.29
Nov 24 17:14:01 "min dator" sshd[4183]: Invalid user party from 61.97.32.29
Nov 24 17:14:04 "min dator" sshd[4188]: Invalid user amanda from 61.97.32.29
Nov 24 17:14:07 "min dator" sshd[4193]: Invalid user rpm from 61.97.32.29
Nov 24 17:14:14 "min dator" sshd[4203]: Invalid user sgi from 61.97.32.29
Nov 24 17:14:20 "min dator" sshd[4214]: Invalid user users from 61.97.32.29
Nov 24 17:14:23 "min dator" sshd[4219]: Invalid user admins from 61.97.32.29
Nov 24 17:14:26 "min dator" sshd[4224]: Invalid user admins from 61.97.32.29
Nov 24 17:14:55 "min dator" sshd[4270]: Invalid user dean from 61.97.32.29
Nov 24 17:14:58 "min dator" sshd[4275]: Invalid user unknown from 61.97.32.29
Nov 24 17:15:01 "min dator" sshd[4280]: Invalid user securityagent from 61.97.32.29
Nov 24 17:15:04 "min dator" sshd[4285]: Invalid user tokend from 61.97.32.29
Nov 24 17:15:07 "min dator" sshd[4290]: Invalid user windowserver from 61.97.32.29
Nov 24 17:15:10 "min dator" sshd[4295]: Invalid user appowner from 61.97.32.29
Nov 24 17:15:13 "min dator" sshd[4300]: Invalid user xgridagent from 61.97.32.29
Nov 24 17:15:17 "min dator" sshd[4305]: Invalid user agent from 61.97.32.29
Nov 24 17:15:20 "min dator" sshd[4311]: Invalid user xgridcontroller from 61.97.32.29
Nov 24 17:15:23 "min dator" sshd[4316]: Invalid user jabber from 61.97.32.29
Nov 24 17:15:26 "min dator" sshd[4321]: Invalid user amavisd from 61.97.32.29
Nov 24 17:15:29 "min dator" sshd[4326]: Invalid user clamav from 61.97.32.29
Nov 24 17:15:32 "min dator" sshd[4331]: Invalid user appserver from 61.97.32.29
Nov 24 17:15:36 "min dator" sshd[4336]: Invalid user mailman from 61.97.32.29
Nov 24 17:15:39 "min dator" sshd[4341]: Invalid user cyrusimap from 61.97.32.29
Nov 24 17:15:42 "min dator" sshd[4346]: Invalid user qtss from 61.97.32.29
Nov 24 17:15:45 "min dator" sshd[4351]: Invalid user eppc from 61.97.32.29
Nov 24 17:15:52 "min dator" sshd[4357]: Invalid user telnetd from 61.97.32.29
Nov 24 17:15:55 "min dator" sshd[4362]: Invalid user identd from 61.97.32.29
Nov 24 17:15:58 "min dator" sshd[4367]: Invalid user gnats from 61.97.32.29
Nov 24 17:16:02 "min dator" sshd[4374]: Invalid user jeff from 61.97.32.29
Nov 24 17:16:05 "min dator" sshd[4379]: Invalid user irc from 61.97.32.29
Nov 24 17:16:08 "min dator" sshd[4384]: Invalid user list from 61.97.32.29
Nov 24 17:16:11 "min dator" sshd[4389]: Invalid user eleve from 61.97.32.29
Nov 24 17:16:18 "min dator" sshd[4394]: Invalid user proxy from 61.97.32.29
Nov 24 17:16:21 "min dator" sshd[4400]: Invalid user sys from 61.97.32.29
Nov 24 17:16:24 "min dator" sshd[4405]: Invalid user zzz from 61.97.32.29
Nov 24 17:16:27 "min dator" sshd[4410]: Invalid user frank from 61.97.32.29
