Форум русскоязычного сообщества Ubuntu


Увидели сообщение с непонятной ссылкой, спам, непристойность или оскорбление?
Воспользуйтесь ссылкой «Сообщить модератору» рядом с сообщением!

Автор Тема: DDOS атака с моего сервера.  (Прочитано 17850 раз)

0 Пользователей и 1 Гость просматривают эту тему.

Оффлайн Xts

  • Старожил
  • *
  • Сообщений: 1677
  • Arch Linux, Kernel 4.20
    • Просмотр профиля
Re: DDOS атака с моего сервера.
« Ответ #60 : 17 Октября 2012, 19:37:03 »
заинтересовала тема, и тоже рештл глянуть, нашел такой большой кусок

Oct 14 18:00:59 localhost sshd[2637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:01 localhost sshd[2637]: Failed password for root from 72.55.174.7 port 56003 ssh2
Oct 14 18:01:01 localhost sshd[2637]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:03 localhost sshd[2640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:05 localhost sshd[2640]: Failed password for root from 72.55.174.7 port 57827 ssh2
Oct 14 18:01:05 localhost sshd[2640]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:07 localhost sshd[2642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:09 localhost sshd[2642]: Failed password for root from 72.55.174.7 port 58845 ssh2
Oct 14 18:01:09 localhost sshd[2642]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:11 localhost sshd[2644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:12 localhost sshd[2644]: Failed password for root from 72.55.174.7 port 33237 ssh2
Oct 14 18:01:13 localhost sshd[2644]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:14 localhost sshd[2646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:17 localhost sshd[2646]: Failed password for root from 72.55.174.7 port 35937 ssh2
Oct 14 18:01:17 localhost sshd[2646]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:19 localhost sshd[2648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:20 localhost sshd[2648]: Failed password for root from 72.55.174.7 port 38711 ssh2
Oct 14 18:01:21 localhost sshd[2648]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:22 localhost sshd[2650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:24 localhost sshd[2650]: Failed password for root from 72.55.174.7 port 39567 ssh2
Oct 14 18:01:24 localhost sshd[2650]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:26 localhost sshd[2652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:28 localhost sshd[2652]: Failed password for root from 72.55.174.7 port 42012 ssh2
Oct 14 18:01:28 localhost sshd[2652]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:30 localhost sshd[2654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:32 localhost sshd[2654]: Failed password for root from 72.55.174.7 port 44334 ssh2
Oct 14 18:01:32 localhost sshd[2654]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:34 localhost sshd[2656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:36 localhost sshd[2656]: Failed password for root from 72.55.174.7 port 45269 ssh2
Oct 14 18:01:36 localhost sshd[2656]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:38 localhost sshd[2658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:40 localhost sshd[2658]: Failed password for root from 72.55.174.7 port 47474 ssh2
Oct 14 18:01:40 localhost sshd[2658]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:42 localhost sshd[2660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:43 localhost sshd[2660]: Failed password for root from 72.55.174.7 port 50244 ssh2
Oct 14 18:01:44 localhost sshd[2660]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:45 localhost sshd[2662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:48 localhost sshd[2662]: Failed password for root from 72.55.174.7 port 51136 ssh2
Oct 14 18:01:48 localhost sshd[2662]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:49 localhost sshd[2664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:51 localhost sshd[2664]: Failed password for root from 72.55.174.7 port 53741 ssh2
Oct 14 18:01:52 localhost sshd[2664]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:53 localhost sshd[2666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:54 localhost sshd[2666]: Failed password for root from 72.55.174.7 port 56534 ssh2
Oct 14 18:01:55 localhost sshd[2666]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:01:56 localhost sshd[2668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:01:58 localhost sshd[2668]: Failed password for root from 72.55.174.7 port 57896 ssh2
Oct 14 18:01:59 localhost sshd[2668]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:00 localhost sshd[2670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:02 localhost sshd[2670]: Failed password for root from 72.55.174.7 port 59844 ssh2
Oct 14 18:02:02 localhost sshd[2670]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:03 localhost sshd[2672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:05 localhost sshd[2672]: Failed password for root from 72.55.174.7 port 33000 ssh2
Oct 14 18:02:06 localhost sshd[2672]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:07 localhost sshd[2674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:09 localhost sshd[2674]: Failed password for root from 72.55.174.7 port 34481 ssh2
Oct 14 18:02:09 localhost sshd[2674]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:11 localhost sshd[2676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:12 localhost sshd[2676]: Failed password for root from 72.55.174.7 port 36280 ssh2
Oct 14 18:02:12 localhost sshd[2676]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:14 localhost sshd[2696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:16 localhost sshd[2696]: Failed password for root from 72.55.174.7 port 38222 ssh2
Oct 14 18:02:16 localhost sshd[2696]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:18 localhost sshd[2698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:19 localhost sshd[2698]: Failed password for root from 72.55.174.7 port 40331 ssh2
Oct 14 18:02:20 localhost sshd[2698]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:21 localhost sshd[2700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:23 localhost sshd[2700]: Failed password for root from 72.55.174.7 port 42877 ssh2
Oct 14 18:02:24 localhost sshd[2700]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:25 localhost sshd[2702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:27 localhost sshd[2702]: Failed password for root from 72.55.174.7 port 44605 ssh2
Oct 14 18:02:27 localhost sshd[2702]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:29 localhost sshd[2704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:31 localhost sshd[2704]: Failed password for root from 72.55.174.7 port 46672 ssh2
Oct 14 18:02:31 localhost sshd[2704]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:33 localhost sshd[2706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:35 localhost sshd[2706]: Failed password for root from 72.55.174.7 port 49832 ssh2
Oct 14 18:02:35 localhost sshd[2706]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:37 localhost sshd[2708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:38 localhost sshd[2708]: Failed password for root from 72.55.174.7 port 51379 ssh2
Oct 14 18:02:38 localhost sshd[2708]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:40 localhost sshd[2710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:42 localhost sshd[2710]: Failed password for root from 72.55.174.7 port 52861 ssh2
Oct 14 18:02:43 localhost sshd[2710]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:44 localhost sshd[2712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:46 localhost sshd[2712]: Failed password for root from 72.55.174.7 port 54457 ssh2
Oct 14 18:02:46 localhost sshd[2712]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:48 localhost sshd[2715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:50 localhost sshd[2715]: Failed password for root from 72.55.174.7 port 57101 ssh2
Oct 14 18:02:50 localhost sshd[2715]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:52 localhost sshd[2719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:54 localhost sshd[2719]: Failed password for root from 72.55.174.7 port 59584 ssh2
Oct 14 18:02:54 localhost sshd[2719]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:56 localhost sshd[2721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:02:57 localhost sshd[2721]: Failed password for root from 72.55.174.7 port 33644 ssh2
Oct 14 18:02:58 localhost sshd[2721]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:02:59 localhost sshd[2723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:01 localhost sshd[2723]: Failed password for root from 72.55.174.7 port 36238 ssh2
Oct 14 18:03:01 localhost sshd[2723]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:03 localhost sshd[2725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:05 localhost sshd[2725]: Failed password for root from 72.55.174.7 port 38266 ssh2
Oct 14 18:03:05 localhost sshd[2725]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:07 localhost sshd[2727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:09 localhost sshd[2727]: Failed password for root from 72.55.174.7 port 40897 ssh2
Oct 14 18:03:09 localhost sshd[2727]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:11 localhost sshd[2731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:13 localhost sshd[2731]: Failed password for root from 72.55.174.7 port 43820 ssh2
Oct 14 18:03:13 localhost sshd[2731]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:15 localhost sshd[2733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:17 localhost sshd[2733]: Failed password for root from 72.55.174.7 port 47138 ssh2
Oct 14 18:03:17 localhost sshd[2733]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:19 localhost sshd[2735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:21 localhost sshd[2735]: Failed password for root from 72.55.174.7 port 50898 ssh2
Oct 14 18:03:21 localhost sshd[2735]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:23 localhost sshd[2737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:25 localhost sshd[2737]: Failed password for root from 72.55.174.7 port 52548 ssh2
Oct 14 18:03:25 localhost sshd[2737]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:26 localhost sshd[2739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:29 localhost sshd[2739]: Failed password for root from 72.55.174.7 port 55777 ssh2
Oct 14 18:03:29 localhost sshd[2739]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:31 localhost sshd[2741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:33 localhost sshd[2741]: Failed password for root from 72.55.174.7 port 59716 ssh2
Oct 14 18:03:33 localhost sshd[2741]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:34 localhost sshd[2743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:37 localhost sshd[2743]: Failed password for root from 72.55.174.7 port 34216 ssh2
Oct 14 18:03:37 localhost sshd[2743]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:39 localhost sshd[2745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:41 localhost sshd[2745]: Failed password for root from 72.55.174.7 port 38584 ssh2
Oct 14 18:03:41 localhost sshd[2745]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:42 localhost sshd[2747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:44 localhost sshd[2747]: Failed password for root from 72.55.174.7 port 42029 ssh2
Oct 14 18:03:44 localhost sshd[2747]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:46 localhost sshd[2749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:48 localhost sshd[2749]: Failed password for root from 72.55.174.7 port 45213 ssh2
Oct 14 18:03:49 localhost sshd[2749]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:50 localhost sshd[2751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:53 localhost sshd[2751]: Failed password for root from 72.55.174.7 port 49216 ssh2
Oct 14 18:03:53 localhost sshd[2751]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:54 localhost sshd[2753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:03:56 localhost sshd[2753]: Failed password for root from 72.55.174.7 port 51289 ssh2
Oct 14 18:03:56 localhost sshd[2753]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:03:58 localhost sshd[2755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:00 localhost sshd[2755]: Failed password for root from 72.55.174.7 port 54508 ssh2
Oct 14 18:04:00 localhost sshd[2755]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:02 localhost sshd[2757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:04 localhost sshd[2757]: Failed password for root from 72.55.174.7 port 58447 ssh2
Oct 14 18:04:04 localhost sshd[2757]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:06 localhost sshd[2759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:08 localhost sshd[2759]: Failed password for root from 72.55.174.7 port 32788 ssh2
Oct 14 18:04:08 localhost sshd[2759]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:10 localhost sshd[2761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:12 localhost sshd[2761]: Failed password for root from 72.55.174.7 port 37124 ssh2
Oct 14 18:04:12 localhost sshd[2761]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:14 localhost sshd[2763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:16 localhost sshd[2763]: Failed password for root from 72.55.174.7 port 41711 ssh2
Oct 14 18:04:16 localhost sshd[2763]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:17 localhost sshd[2765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:19 localhost sshd[2765]: Failed password for root from 72.55.174.7 port 45062 ssh2
Oct 14 18:04:20 localhost sshd[2765]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:21 localhost sshd[2767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:23 localhost sshd[2767]: Failed password for root from 72.55.174.7 port 49421 ssh2
Oct 14 18:04:24 localhost sshd[2767]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:25 localhost sshd[2769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:27 localhost sshd[2769]: Failed password for root from 72.55.174.7 port 54518 ssh2
Oct 14 18:04:27 localhost sshd[2769]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:29 localhost sshd[2772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:31 localhost sshd[2772]: Failed password for root from 72.55.174.7 port 58386 ssh2
Oct 14 18:04:31 localhost sshd[2772]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:33 localhost sshd[2775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:35 localhost sshd[2775]: Failed password for root from 72.55.174.7 port 34615 ssh2
Oct 14 18:04:35 localhost sshd[2775]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:37 localhost sshd[2778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:38 localhost sshd[2778]: Failed password for root from 72.55.174.7 port 39648 ssh2
Oct 14 18:04:38 localhost sshd[2778]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:40 localhost sshd[2782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:42 localhost sshd[2782]: Failed password for root from 72.55.174.7 port 42885 ssh2
Oct 14 18:04:43 localhost sshd[2782]: Received disconnect from 72.55.174.7: 11: Bye Bye [preauth]
Oct 14 18:04:44 localhost sshd[2784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.oishosting.net  user=root
Oct 14 18:04:47 localhost sshd[2784]: Failed password for root from 72.55.174.7 port 47940 ssh2
[preauth]
я так понимаю это было целенаправленно?
ASUS Sabertooth 990FX R2.0
AMD FX-8350 x8@5Ггц, AMD Memory 16Гб
AMD Radeon R9 290X

Оффлайн ii343hbka

  • Старожил
  • *
  • Сообщений: 1048
    • Просмотр профиля
Re: DDOS атака с моего сервера.
« Ответ #61 : 18 Октября 2012, 09:28:20 »
да ну
бот, скорее всего
ж)
ммм... Убунточка

Оффлайн Sly_tom_cat

  • Don't worry, be happy!
  • Заслуженный пользователь
  • Старожил
  • *
  • Сообщений: 12139
  • Xubuntu 22.04
    • Просмотр профиля
    • Github
Re: DDOS атака с моего сервера.
« Ответ #62 : 18 Октября 2012, 12:43:56 »
Да уж... бот дотошный - по разным портам лупится и на своей стороны порты меняет зачемто...
Индикатор для Yandex-Disk: https://forum.ubuntu.ru/index.php?topic=241992
UEFI-Boot - грузимся без загрузчика: https://help.ubuntu.ru/wiki/uefiboot

Оффлайн saymon21root

  • Участник
  • *
  • Сообщений: 166
    • Просмотр профиля
    • https://saymon21-root.pro
Re: DDOS атака с моего сервера.
« Ответ #63 : 18 Октября 2012, 12:54:19 »
fail2ban и авторизация по ключам!!!! Пофигу на остальное! У меня вот на серверах только так. При этом, в день, ну стукнут два-три бота. Пофигу, им всё равно ловить нефигу.
« Последнее редактирование: 18 Октября 2012, 12:58:13 от denis32 »

Оффлайн ii343hbka

  • Старожил
  • *
  • Сообщений: 1048
    • Просмотр профиля
Re: DDOS атака с моего сервера.
« Ответ #64 : 18 Октября 2012, 19:01:32 »
Oct 14 08:58:22 localhost sshd[26041]: Failed password for invalid user root from 195.2.219.2 port 58267 ssh2
Oct 18 18:59:33 localhost sshd[24818]: Accepted publickey for den-laden from 192.168.0.4 port 50710 ssh2

вот в логах у меня
так что бот порт назначения не меняет
ж)
ммм... Убунточка

 

Страница сгенерирована за 0.02 секунд. Запросов: 22.