secure log

[Kun Csaba]

Sziasztok!

(bocsi kicsit hosszú)
Ilyen bejegyzéseim vannak:

Nov  7 09:26:27 zeusz sshd[16938]: Failed password for illegal user andras
from ::ffff:84.244.4.36 port 49979 ssh2
Nov  7 09:26:31 zeusz sshd[16940]: Failed password for root from
::ffff:84.244.4.36 port 50099 ssh2
Nov  7 09:26:34 zeusz sshd[16945]: Failed password for root from
::ffff:84.244.4.36 port 50208 ssh2
Nov  7 09:26:35 zeusz sshd[16947]: Illegal user andrea from
::ffff:84.244.4.36
Nov  7 09:26:38 zeusz sshd[16947]: Failed password for illegal user andrea
from ::ffff:84.244.4.36 port 50318 ssh2
Nov  7 09:26:39 zeusz sshd[16949]: Illegal user andrea from
::ffff:84.244.4.36
Nov  7 09:26:41 zeusz sshd[16949]: Failed password for illegal user andrea
from ::ffff:84.244.4.36 port 50436 ssh2
Nov  7 09:26:44 zeusz sshd[16951]: Failed password for root from
::ffff:84.244.4.36 port 50552 ssh2
Nov  7 09:26:48 zeusz sshd[16953]: Failed password for root from
::ffff:84.244.4.36 port 50687 ssh2
Nov  7 09:26:49 zeusz sshd[16955]: Illegal user andris from
::ffff:84.244.4.36
Nov  7 09:26:51 zeusz sshd[16955]: Failed password for illegal user andris
from ::ffff:84.244.4.36 port 50814 ssh2
Nov  7 09:26:52 zeusz sshd[16957]: Illegal user andris from
::ffff:84.244.4.36
Nov  7 09:26:55 zeusz sshd[16957]: Failed password for illegal user andris
from ::ffff:84.244.4.36 port 50945 ssh2
Nov  7 09:26:58 zeusz sshd[16959]: Failed password for root from
::ffff:84.244.4.36 port 51081 ssh2
Nov  7 09:27:02 zeusz sshd[16961]: Failed password for root from
::ffff:84.244.4.36 port 51208 ssh2
Nov  7 09:27:03 zeusz sshd[16963]: Illegal user angyalka from
::ffff:84.244.4.36
Nov  7 09:27:05 zeusz sshd[16963]: Failed password for illegal user
angyalka from ::ffff:84.244.4.36 port 51339 ssh2
Nov  7 09:27:06 zeusz sshd[16965]: Illegal user angyalka from
::ffff:84.244.4.36
Nov  7 09:27:09 zeusz sshd[16965]: Failed password for illegal user
angyalka from ::ffff:84.244.4.36 port 51466 ssh2
Nov  7 09:27:12 zeusz sshd[16967]: Failed password for root from
::ffff:84.244.4.36 port 51587 ssh2
Nov  7 09:27:16 zeusz sshd[16969]: Failed password for root from
::ffff:84.244.4.36 port 51717 ssh2
Nov  7 09:27:17 zeusz sshd[16971]: Illegal user aniko from ::ffff:84.244.4.36
Nov  7 09:27:19 zeusz sshd[16971]: Failed password for illegal user aniko
from ::ffff:84.244.4.36 port 51841 ssh2
Nov  7 09:27:20 zeusz sshd[16973]: Illegal user aniko from ::ffff:84.244.4.36
Nov  7 09:27:23 zeusz sshd[16973]: Failed password for illegal user aniko
from ::ffff:84.244.4.36 port 51961 ssh2
Nov  7 09:27:26 zeusz sshd[16975]: Failed password for root from
::ffff:84.244.4.36 port 52086 ssh2
Nov  7 09:27:30 zeusz sshd[16977]: Failed password for root from
::ffff:84.244.4.36 port 52199 ssh2
Nov  7 09:27:30 zeusz dovecot-auth: pam_succeed_if: requirement "uid <
100" not met by user "csaba"
Nov  7 09:27:30 zeusz sshd[16981]: Illegal user anna from ::ffff:84.244.4.36
Nov  7 09:27:33 zeusz sshd[16981]: Failed password for illegal user anna
from ::ffff:84.244.4.36 port 52322 ssh2


Aztán jönnek a "b" betűsök, aztán a "c" és így tovább. Valaki vette a
keresztneveket és rápróbálja mint belépési név(gondolom egy progi).
Ahonnan próbálkozik az is változik.
Egyenlőre visszadobja a rendszer csak kicsit idegesít.
Lehet valamit tenni, vagy csak fürkésszem a logokat?
Ti hogy szoktátok kezelni az ilyeneket?

Üdv:
Kun Csaba
rg.
Sághy Mihály Szakképző Iskola, Középiskola és Kollégium
Csongrád