글 수 3,386
서버는버벅대고 봇들은 하두들어와서
오랜만에.......는아니고 몇년간 처음으로.... 로그를 보니
ssh쪽으로 공격흔적이있네요
그냥 포트만 열려있으면 패스워드무작위로 대입해오는 공격이라
흔하다보면 흔한거겠지만 관심있는분이 좀 관리해주세요용~
http://blog.naver.com/lemonaroma98/60021962163 참고
저는 20000
사랑합니다후배님들
Jan 3 23:56:36 blending sshd[24903]: reverse mapping checking getaddrinfo for static-52-53.mk-net.ru failed - POSSIBLE BREAK-IN ATTEMPT! Jan 3 23:56:36 blending sshd[24903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.211.52.53 user=root Jan 3 23:56:38 blending sshd[24903]: Failed password for root from 91.211.52.53 port 58258 ssh2 Jan 3 23:56:38 blending sshd[24904]: Received disconnect from 91.211.52.53: 11: Bye Bye Jan 3 23:56:40 blending sshd[24908]: reverse mapping checking getaddrinfo for static-52-53.mk-net.ru failed - POSSIBLE BREAK-IN ATTEMPT! Jan 3 23:56:40 blending sshd[24908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.211.52.53 user=root Jan 3 23:56:42 blending sshd[24908]: Failed password for root from 91.211.52.53 port 59790 ssh2 Jan 3 23:56:43 blending sshd[24909]: Received disconnect from 91.211.52.53: 11: Bye Bye Jan 3 23:56:45 blending sshd[24910]: reverse mapping checking getaddrinfo for static-52-53.mk-net.ru failed - POSSIBLE BREAK-IN ATTEMPT! Jan 3 23:56:45 blending sshd[24910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.211.52.53 user=root Jan 3 23:56:47 blending sshd[24910]: Failed password for root from 91.211.52.53 port 33119 ssh2 Jan 3 23:56:47 blending sshd[24911]: Received disconnect from 91.211.52.53: 11: Bye Bye Jan 3 23:56:49 blending sshd[24913]: reverse mapping checking getaddrinfo for static-52-53.mk-net.ru failed - POSSIBLE BREAK-IN ATTEMPT! Jan 3 23:56:49 blending sshd[24913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.211.52.53 user=root Jan 3 23:56:52 blending sshd[24913]: Failed password for root from 91.211.52.53 port 34492 ssh2 Jan 3 23:56:52 blending sshd[24914]: Received disconnect from 91.211.52.53: 11: Bye Bye Jan 3 23:56:55 blending sshd[24915]: reverse mapping checking getaddrinfo for static-52-53.mk-net.ru failed - POSSIBLE BREAK-IN ATTEMPT! Jan 3 23:56:55 blending sshd[24915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.211.52.53 user=root Jan 3 23:56:57 blending sshd[24915]: Failed password for root from 91.211.52.53 port 36243 ssh2




아.. 후배시키는 거구나