Jan 24 05:06:02 linux sshd[14598]: Did not receive identification string from ::ffff:63.113.69.19
Jan 24 05:21:40 linux sshd[14619]: Invalid user oracle from ::ffff:63.113.69.19
Jan 24 05:21:45 linux sshd[14623]: Invalid user stu from ::ffff:63.113.69.19
Jan 24 05:21:47 linux sshd[14625]: Invalid user art from ::ffff:63.113.69.19
Jan 24 05:21:49 linux sshd[14627]: Invalid user linux from ::ffff:63.113.69.19
Jan 24 05:22:17 linux sshd[14629]: Did not receive identification string from ::ffff:63.113.69.19
Jan 24 05:57:29 linux sshd[14671]: Invalid user oracle from ::ffff:63.113.69.19
Jan 24 05:57:34 linux sshd[14675]: Invalid user stu from ::ffff:63.113.69.19
Jan 24 05:57:36 linux sshd[14677]: Invalid user art from ::ffff:63.113.69.19
Jan 24 05:57:38 linux sshd[14679]: Invalid user linux from ::ffff:63.113.69.19
Jan 24 05:57:47 linux sshd[14681]: Invalid user linux from ::ffff:63.113.69.19
Jan 24 05:57:49 linux sshd[14683]: Invalid user linux from ::ffff:63.113.69.19
Jan 24 05:57:51 linux sshd[14685]: Invalid user linux from ::ffff:63.113.69.19
Jan 24 05:57:53 linux sshd[14687]: Invalid user linux from ::ffff:63.113.69.19
Jan 24 05:57:56 linux sshd[14689]: Invalid user linux from ::ffff:63.113.69.19
Jan 24 05:57:58 linux sshd[14691]: Invalid user linux from ::ffff:63.113.69.19
Jan 24 05:58:00 linux sshd[14693]: Invalid user linux from ::ffff:63.113.69.19
Jan 24 05:58:02 linux sshd[14695]: Invalid user linux from ::ffff:63.113.69.19
Wer eines dieser Script-Kiddies findet, darf es behalten und auch ganz fest draufhauen. Damit es richtig fest weh tut.
> cat /var/log/messages | grep „Invalid user“ | wc -l
2755
Und das seit Anfang des Jahres erst…
Im gleichen Zeitraum kann ich 11583 „Invalid user“ bieten. Kommt jemand höher? 😉
Hey netter Blog 😉
Bin zufällig durch google hier vorbeigekommen, u.a. durch die komischen Eigenheiten von canhost :-/
http://www.google.com/search?q=inurl:canhost.de/start/sperre.php&hl=en&hs=Wr&lr=&c2coff=1&safe=off&client=firefox-a&rls=org.mozilla:de:official&start=10&sa=N&filter=0
Nur mal 2 Tage….
################### LogWatch Sun Feb 12 03:10:02 2006
Couldn’t resolve these IPs:
websrv4.idtechnologies.ca: 4050 Time(s)
################### LogWatch Mon Feb 13 03:10:02 2006
Couldn’t resolve these IPs:
202.8.178.250.static.e-power.com.tw: 1063 Time(s)