作者 主題: security訊息  (閱讀 3906 次)

0 會員 與 1 訪客 正在閱讀本文。

rest

  • 懷疑的國中生
  • **
  • 文章數: 64
    • 檢視個人資料
security訊息
« 於: 2005-02-02 02:19 »
可否請教大大這訊息代表什麼?
它是瘋了嗎




Feb  1 08:21:10 freebsd sshd[78501]: Failed password for invalid user mortimer from 70.84.72.68 port 35155 ssh2
Feb  1 08:21:12 freebsd sshd[78503]: Invalid user lloyd from 70.84.72.68
Feb  1 08:21:12 freebsd sshd[78503]: Failed password for invalid user lloyd from 70.84.72.68 port 36034 ssh2
Feb  1 08:21:14 freebsd sshd[78505]: Invalid user guinness from 70.84.72.68
Feb  1 08:21:15 freebsd sshd[78505]: Failed password for invalid user guinness from 70.84.72.68 port 36815 ssh2
Feb  1 08:21:21 freebsd sshd[78507]: Invalid user godzilla from 70.84.72.68
Feb  1 08:21:21 freebsd sshd[78507]: Failed password for invalid user godzilla from 70.84.72.68 port 37620 ssh2
Feb  1 08:21:23 freebsd sshd[78510]: Invalid user charlott from 70.84.72.68
Feb  1 08:21:23 freebsd sshd[78510]: Failed password for invalid user charlott from 70.84.72.68 port 40063 ssh2
Feb  1 08:21:26 freebsd sshd[78513]: Invalid user apple1 from 70.84.72.68
Feb  1 08:21:26 freebsd sshd[78513]: Failed password for invalid user apple1 from 70.84.72.68 port 40858 ssh2
Feb  1 08:21:28 freebsd sshd[78515]: Invalid user maurice from 70.84.72.68
Feb  1 08:21:28 freebsd sshd[78515]: Failed password for invalid user maurice from 70.84.72.68 port 41650 ssh2
Feb  1 08:21:30 freebsd sshd[78517]: Invalid user isabelle from 70.84.72.68
Feb  1 08:21:30 freebsd sshd[78517]: Failed password for invalid user isabelle from 70.84.72.68 port 42354 ssh2
Feb  1 08:21:32 freebsd sshd[78519]: Invalid user bernard from 70.84.72.68
Feb  1 08:21:32 freebsd sshd[78519]: Failed password for invalid user bernard from 70.84.72.68 port 43139 ssh2
Feb  1 08:21:34 freebsd sshd[78521]: Invalid user angela from 70.84.72.68
Feb  1 08:21:34 freebsd sshd[78521]: Failed password for invalid user angela from 70.84.72.68 port 43918 ssh2
Feb  1 08:21:36 freebsd sshd[78523]: Invalid user sylvia from 70.84.72.68
Feb  1 08:21:36 freebsd sshd[78523]: Failed password for invalid user sylvia from 70.84.72.68 port 44672 ssh2
Feb  1 08:21:38 freebsd sshd[78525]: Invalid user tara from 70.84.72.68
Feb  1 08:21:38 freebsd sshd[78525]: Failed password for invalid user tara from 70.84.72.68 port 45370 ssh2
Feb  1 08:21:41 freebsd sshd[78527]: Invalid user penelope from 70.84.72.68
Feb  1 08:21:41 freebsd sshd[78527]: Failed password for invalid user penelope from 70.84.72.68 port 46141 ssh2
Feb  1 08:21:43 freebsd sshd[78529]: Invalid user peewee from 70.84.72.68
Feb  1 08:21:43 freebsd sshd[78529]: Failed password for invalid user peewee from 70.84.72.68 port 46922 ssh2
Feb  1 08:21:45 freebsd sshd[78531]: Invalid user monique from 70.84.72.68
Feb  1 08:21:45 freebsd sshd[78531]: Failed password for invalid user monique from 70.84.72.68 port 47704 ssh2
Feb  1 08:21:47 freebsd sshd[78533]: Invalid user moon from 70.84.72.68
Feb  1 08:21:47 freebsd sshd[78533]: Failed password for invalid user moon from 70.84.72.68 port 48462 ssh2
Feb  1 08:21:53 freebsd sshd[78535]: Invalid user kristin from 70.84.72.68
Feb  1 08:21:53 freebsd sshd[78535]: Failed password for invalid user kristin from 70.84.72.68 port 49255 ssh2
Feb  1 08:21:55 freebsd sshd[78546]: Invalid user kristen from 70.84.72.68
Feb  1 08:21:55 freebsd sshd[78546]: Failed password for invalid user kristen from 70.84.72.68 port 51064 ssh2
Feb  1 08:21:57 freebsd sshd[78548]: Invalid user duckie from 70.84.72.68
Feb  1 08:21:57 freebsd sshd[78548]: Failed password for invalid user duckie from 70.84.72.68 port 51792 ssh2
Feb  1 08:21:59 freebsd sshd[78550]: Invalid user dylan from 70.84.72.68
Feb  1 08:21:59 freebsd sshd[78550]: Failed password for invalid user dylan from 70.84.72.68 port 52489 ssh2
Feb  1 08:22:02 freebsd sshd[78552]: Invalid user ellen from 70.84.72.68
Feb  1 08:22:02 freebsd sshd[78552]: Failed password for invalid user ellen from 70.84.72.68 port 53266 ssh2
Feb  1 08:22:04 freebsd sshd[78572]: Invalid user vicky from 70.84.72.68
Feb  1 08:22:04 freebsd sshd[78572]: Failed password for invalid user vicky from 70.84.72.68 port 54083 ssh2
Feb  1 08:22:06 freebsd sshd[78577]: Invalid user harris from 70.84.72.68
Feb  1 08:22:06 freebsd sshd[78577]: Failed password for invalid user harris from 70.84.72.68 port 54938 ssh2
Feb  1 08:22:08 freebsd sshd[78579]: Invalid user kjayroe from 70.84.72.68
Feb  1 08:22:08 freebsd sshd[78579]: Failed password for invalid user kjayroe from 70.84.72.68 port 55738 ssh2
Feb  1 08:22:16 freebsd sshd[78582]: Invalid user martinez from 70.84.72.68
Feb  1 08:22:16 freebsd sshd[78582]: Failed password for invalid user martinez from 70.84.72.68 port 56501 ssh2
Feb  1 08:22:18 freebsd sshd[78585]: Failed password for root from 70.84.72.68 port 59184 ssh2
Feb  1 08:22:20 freebsd sshd[78587]: Failed password for root from 70.84.72.68 port 59968 ssh2
Feb  1 08:22:22 freebsd sshd[78589]: Failed password for root from 70.84.72.68 port 60723 ssh2
Feb  1 08:22:24 freebsd sshd[78591]: Failed password for root from 70.84.72.68 port 33271 ssh2
Feb  1 08:22:26 freebsd sshd[78593]: Failed password for root from 70.84.72.68 port 33991 ssh2
Feb  1 08:22:29 freebsd sshd[78595]: Failed password for root from 70.84.72.68 port 34728 ssh2
Feb  1 08:22:31 freebsd sshd[78597]: Failed password for root from 70.84.72.68 port 35512 ssh2
Feb  1 08:22:33 freebsd sshd[78599]: Failed password for root from 70.84.72.68 port 36272 ssh2
Feb  1 08:22:35 freebsd sshd[78601]: Failed password for root from 70.84.72.68 port 36960 ssh2
Feb  1 08:22:37 freebsd sshd[78603]: Failed password for root from 70.84.72.68 port 37692 ssh2
Feb  1 08:22:40 freebsd sshd[78605]: Failed password for root from 70.84.72.68 port 38439 ssh2
Feb  1 08:22:42 freebsd sshd[78607]: Failed password for root from 70.84.72.68 port 39200 ssh2
Feb  1 08:22:44 freebsd sshd[78609]: Failed password for root from 70.84.72.68 port 39906 ssh2
Feb  1 08:22:46 freebsd sshd[78611]: Failed password for root from 70.84.72.68 port 40648 ssh2
Feb  1 08:22:48 freebsd sshd[78613]: Failed password for root from 70.84.72.68 port 41358 ssh2
Feb  1 08:22:51 freebsd sshd[78617]: Failed password for root from 70.84.72.68 port 42130 ssh2
Feb  1 08:22:53 freebsd sshd[78621]: Failed password for root from 70.84.72.68 port 43074 ssh2
Feb  1 08:22:55 freebsd sshd[78623]: Failed password for root from 70.84.72.68 port 43863 ssh2
Feb  1 08:22:57 freebsd sshd[78625]: Failed password for root from 70.84.72.68 port 44599 ssh2
Feb  1 08:23:05 freebsd sshd[78627]: Failed password for root from 70.84.72.68 port 45304 ssh2
Feb  1 08:23:10 freebsd sshd[78629]: Failed password for root from 70.84.72.68 port 47662 ssh2
Feb  1 08:23:12 freebsd sshd[78631]: Failed password for root from 70.84.72.68 port 49361 ssh2
Feb  1 08:23:14 freebsd sshd[78633]: Failed password for root from 70.84.72.68 port 50074 ssh2
Feb  1 08:23:16 freebsd sshd[78635]: Failed password for root from 70.84.72.68 port 50782 ssh2
Feb  1 08:23:18 freebsd sshd[78637]: Failed password for root from 70.84.72.68 port 51534 ssh2
Feb  1 08:23:21 freebsd sshd[78639]: Failed password for root from 70.84.72.68 port 52280 ssh2
Feb  1 08:23:23 freebsd sshd[78641]: Failed password for root from 70.84.72.68 port 53051 ssh2
Feb  1 08:23:26 freebsd sshd[78645]: Failed password for root from 70.84.72.68 port 53868 ssh2
Feb  1 08:23:29 freebsd sshd[78649]: Failed password for root from 70.84.72.68 port 54909 ssh2
Feb  1 08:23:33 freebsd sshd[78652]: Failed password for root from 70.84.72.68 port 56000 ssh2
Feb  1 08:23:37 freebsd sshd[78655]: Failed password for root from 70.84.72.68 port 57638 ssh2
Feb  1 08:23:40 freebsd sshd[78658]: Failed password for root from 70.84.72.68 port 58892 ssh2
Feb  1 08:23:42 freebsd sshd[78661]: Failed password for root from 70.84.72.68 port 60244 ssh2
Feb  1 08:23:45 freebsd sshd[78664]: Failed password for root from 70.84.72.68 port 32863 ssh2
Feb  1 08:23:47 freebsd sshd[78666]: Failed password for root from 70.84.72.68 port 33743 ssh2
Feb  1 08:23:49 freebsd sshd[78668]: Failed password for root from 70.84.72.68 port 34638 ssh2
Feb  1 08:23:51 freebsd sshd[78670]: Failed password for root from 70.84.72.68 port 35537 ssh2
Feb  1 08:23:54 freebsd sshd[78672]: Failed password for root from 70.84.72.68 port 36375 ssh2
Feb  1 08:23:56 freebsd sshd[78674]: Failed password for root from 70.84.72.68 port 37210 ssh2
Feb  1 08:23:58 freebsd sshd[78676]: Failed password for root from 70.84.72.68 port 37977 ssh2
Feb  1 08:24:00 freebsd sshd[78678]: Failed password for root from 70.84.72.68 port 38786 ssh2
Feb  1 08:24:02 freebsd sshd[78680]: Failed password for root from 70.84.72.68 port 39634 ssh2
Feb  1 08:24:04 freebsd sshd[78682]: Failed password for root from 70.84.72.68 port 40569 ssh2
Feb  1 08:24:07 freebsd sshd[78684]: Failed password for root from 70.84.72.68 port 41330 ssh2
Feb  1 08:24:09 freebsd sshd[78686]: Failed password for root from 70.84.72.68 port 42236 ssh2

nolan

  • 懷疑的國中生
  • **
  • 文章數: 71
    • 檢視個人資料
hosts.allow
« 回覆 #1 於: 2005-02-02 03:13 »
#sshd
sshd : localhost
sshd : 連線ip範圍
sshd : ALL :deny

註解 一開始 的
#ALL : ALL : allow

定時每天收看 syslog 給 system 的 mail log

 :wink:

Overcertified

  • 鑽研的研究生
  • *****
  • 文章數: 555
    • 檢視個人資料
    • http://www.itpro.tw
Re: security訊息
« 回覆 #2 於: 2005-02-02 09:38 »
引述: "rest"
可否請教大大這訊息代表什麼?
它是瘋了嗎




Feb  1 08:21:10 freebsd sshd[78501]: Failed password for invalid user mortimer from 70.84.72.68 port 35155 ssh2
Feb  1 08:21:12 freebsd sshd[78503]: Invalid user lloyd from 70.84.72.68
Feb  1 08:21:12 freebsd sshd[78503]: Failed password for invalid user lloyd from 70.84.72.68 port 36034 ssh2
Feb  1 08:21:14 freebsd sshd[78505]: Invalid user guinness from 70.84.72.68
Feb  1 08:21:15 freebsd sshd[78505]: Failed password for invalid user guinness from 70.84.72.68 port 36815 ssh2
Feb  1 08:21:21 freebsd sshd[78507]: Invalid user godzilla from 70.84.72.68
Feb  1 08:21:21 freebsd sshd[78507]: Failed password for invalid user godzilla from 70.84.72.68 port 37620 ssh2
Feb  1 08:21:23 freebsd sshd[78510]: Invalid user charlott from 70.84.72.68
Feb  1 08:21:23 freebsd sshd[78510]: Failed password for invalid user charlott from 70.84.72.68 port 40063 ssh2
Feb  1 08:21:26 freebsd sshd[78513]: Invalid user apple1 from 70.84.72.68
Feb  1 08:21:26 freebsd sshd[78513]: Failed password for invalid user apple1 from 70.84.72.68 port 40858 ssh2
Feb  1 08:21:28 freebsd sshd[78515]: Invalid user maurice from 70.84.72.68
Feb  1 08:21:28 freebsd sshd[78515]: Failed password for invalid user maurice from 70.84.72.68 port 41650 ssh2
Feb  1 08:21:30 freebsd sshd[78517]: Invalid user isabelle from 70.84.72.68
Feb  1 08:21:30 freebsd sshd[78517]: Failed password for invalid user isabelle from 70.84.72.68 port 42354 ssh2
Feb  1 08:21:32 freebsd sshd[78519]: Invalid user bernard from 70.84.72.68
Feb  1 08:21:32 freebsd sshd[78519]: Failed password for invalid user bernard from 70.84.72.68 port 43139 ssh2
Feb  1 08:21:34 freebsd sshd[78521]: Invalid user angela from 70.84.72.68
Feb  1 08:21:34 freebsd sshd[78521]: Failed password for invalid user angela from 70.84.72.68 port 43918 ssh2
Feb  1 08:21:36 freebsd sshd[78523]: Invalid user sylvia from 70.84.72.68
Feb  1 08:21:36 freebsd sshd[78523]: Failed password for invalid user sylvia from 70.84.72.68 port 44672 ssh2
Feb  1 08:21:38 freebsd sshd[78525]: Invalid user tara from 70.84.72.68
Feb  1 08:21:38 freebsd sshd[78525]: Failed password for invalid user tara from 70.84.72.68 port 45370 ssh2
Feb  1 08:21:41 freebsd sshd[78527]: Invalid user penelope from 70.84.72.68
Feb  1 08:21:41 freebsd sshd[78527]: Failed password for invalid user penelope from 70.84.72.68 port 46141 ssh2
Feb  1 08:21:43 freebsd sshd[78529]: Invalid user peewee from 70.84.72.68
Feb  1 08:21:43 freebsd sshd[78529]: Failed password for invalid user peewee from 70.84.72.68 port 46922 ssh2
Feb  1 08:21:45 freebsd sshd[78531]: Invalid user monique from 70.84.72.68
Feb  1 08:21:45 freebsd sshd[78531]: Failed password for invalid user monique from 70.84.72.68 port 47704 ssh2
Feb  1 08:21:47 freebsd sshd[78533]: Invalid user moon from 70.84.72.68
Feb  1 08:21:47 freebsd sshd[78533]: Failed password for invalid user moon from 70.84.72.68 port 48462 ssh2
Feb  1 08:21:53 freebsd sshd[78535]: Invalid user kristin from 70.84.72.68
Feb  1 08:21:53 freebsd sshd[78535]: Failed password for invalid user kristin from 70.84.72.68 port 49255 ssh2
Feb  1 08:21:55 freebsd sshd[78546]: Invalid user kristen from 70.84.72.68
Feb  1 08:21:55 freebsd sshd[78546]: Failed password for invalid user kristen from 70.84.72.68 port 51064 ssh2
Feb  1 08:21:57 freebsd sshd[78548]: Invalid user duckie from 70.84.72.68
Feb  1 08:21:57 freebsd sshd[78548]: Failed password for invalid user duckie from 70.84.72.68 port 51792 ssh2
Feb  1 08:21:59 freebsd sshd[78550]: Invalid user dylan from 70.84.72.68
Feb  1 08:21:59 freebsd sshd[78550]: Failed password for invalid user dylan from 70.84.72.68 port 52489 ssh2
Feb  1 08:22:02 freebsd sshd[78552]: Invalid user ellen from 70.84.72.68
Feb  1 08:22:02 freebsd sshd[78552]: Failed password for invalid user ellen from 70.84.72.68 port 53266 ssh2
Feb  1 08:22:04 freebsd sshd[78572]: Invalid user vicky from 70.84.72.68
Feb  1 08:22:04 freebsd sshd[78572]: Failed password for invalid user vicky from 70.84.72.68 port 54083 ssh2
Feb  1 08:22:06 freebsd sshd[78577]: Invalid user harris from 70.84.72.68
Feb  1 08:22:06 freebsd sshd[78577]: Failed password for invalid user harris from 70.84.72.68 port 54938 ssh2
Feb  1 08:22:08 freebsd sshd[78579]: Invalid user kjayroe from 70.84.72.68
Feb  1 08:22:08 freebsd sshd[78579]: Failed password for invalid user kjayroe from 70.84.72.68 port 55738 ssh2
Feb  1 08:22:16 freebsd sshd[78582]: Invalid user martinez from 70.84.72.68
Feb  1 08:22:16 freebsd sshd[78582]: Failed password for invalid user martinez from 70.84.72.68 port 56501 ssh2
Feb  1 08:22:18 freebsd sshd[78585]: Failed password for root from 70.84.72.68 port 59184 ssh2
Feb  1 08:22:20 freebsd sshd[78587]: Failed password for root from 70.84.72.68 port 59968 ssh2
Feb  1 08:22:22 freebsd sshd[78589]: Failed password for root from 70.84.72.68 port 60723 ssh2
Feb  1 08:22:24 freebsd sshd[78591]: Failed password for root from 70.84.72.68 port 33271 ssh2
Feb  1 08:22:26 freebsd sshd[78593]: Failed password for root from 70.84.72.68 port 33991 ssh2
Feb  1 08:22:29 freebsd sshd[78595]: Failed password for root from 70.84.72.68 port 34728 ssh2
Feb  1 08:22:31 freebsd sshd[78597]: Failed password for root from 70.84.72.68 port 35512 ssh2
Feb  1 08:22:33 freebsd sshd[78599]: Failed password for root from 70.84.72.68 port 36272 ssh2
Feb  1 08:22:35 freebsd sshd[78601]: Failed password for root from 70.84.72.68 port 36960 ssh2
Feb  1 08:22:37 freebsd sshd[78603]: Failed password for root from 70.84.72.68 port 37692 ssh2
Feb  1 08:22:40 freebsd sshd[78605]: Failed password for root from 70.84.72.68 port 38439 ssh2
Feb  1 08:22:42 freebsd sshd[78607]: Failed password for root from 70.84.72.68 port 39200 ssh2
Feb  1 08:22:44 freebsd sshd[78609]: Failed password for root from 70.84.72.68 port 39906 ssh2
Feb  1 08:22:46 freebsd sshd[78611]: Failed password for root from 70.84.72.68 port 40648 ssh2
Feb  1 08:22:48 freebsd sshd[78613]: Failed password for root from 70.84.72.68 port 41358 ssh2
Feb  1 08:22:51 freebsd sshd[78617]: Failed password for root from 70.84.72.68 port 42130 ssh2
Feb  1 08:22:53 freebsd sshd[78621]: Failed password for root from 70.84.72.68 port 43074 ssh2
Feb  1 08:22:55 freebsd sshd[78623]: Failed password for root from 70.84.72.68 port 43863 ssh2
Feb  1 08:22:57 freebsd sshd[78625]: Failed password for root from 70.84.72.68 port 44599 ssh2
Feb  1 08:23:05 freebsd sshd[78627]: Failed password for root from 70.84.72.68 port 45304 ssh2
Feb  1 08:23:10 freebsd sshd[78629]: Failed password for root from 70.84.72.68 port 47662 ssh2
Feb  1 08:23:12 freebsd sshd[78631]: Failed password for root from 70.84.72.68 port 49361 ssh2
Feb  1 08:23:14 freebsd sshd[78633]: Failed password for root from 70.84.72.68 port 50074 ssh2
Feb  1 08:23:16 freebsd sshd[78635]: Failed password for root from 70.84.72.68 port 50782 ssh2
Feb  1 08:23:18 freebsd sshd[78637]: Failed password for root from 70.84.72.68 port 51534 ssh2
Feb  1 08:23:21 freebsd sshd[78639]: Failed password for root from 70.84.72.68 port 52280 ssh2
Feb  1 08:23:23 freebsd sshd[78641]: Failed password for root from 70.84.72.68 port 53051 ssh2
Feb  1 08:23:26 freebsd sshd[78645]: Failed password for root from 70.84.72.68 port 53868 ssh2
Feb  1 08:23:29 freebsd sshd[78649]: Failed password for root from 70.84.72.68 port 54909 ssh2
Feb  1 08:23:33 freebsd sshd[78652]: Failed password for root from 70.84.72.68 port 56000 ssh2
Feb  1 08:23:37 freebsd sshd[78655]: Failed password for root from 70.84.72.68 port 57638 ssh2
Feb  1 08:23:40 freebsd sshd[78658]: Failed password for root from 70.84.72.68 port 58892 ssh2
Feb  1 08:23:42 freebsd sshd[78661]: Failed password for root from 70.84.72.68 port 60244 ssh2
Feb  1 08:23:45 freebsd sshd[78664]: Failed password for root from 70.84.72.68 port 32863 ssh2
Feb  1 08:23:47 freebsd sshd[78666]: Failed password for root from 70.84.72.68 port 33743 ssh2
Feb  1 08:23:49 freebsd sshd[78668]: Failed password for root from 70.84.72.68 port 34638 ssh2
Feb  1 08:23:51 freebsd sshd[78670]: Failed password for root from 70.84.72.68 port 35537 ssh2
Feb  1 08:23:54 freebsd sshd[78672]: Failed password for root from 70.84.72.68 port 36375 ssh2
Feb  1 08:23:56 freebsd sshd[78674]: Failed password for root from 70.84.72.68 port 37210 ssh2
Feb  1 08:23:58 freebsd sshd[78676]: Failed password for root from 70.84.72.68 port 37977 ssh2
Feb  1 08:24:00 freebsd sshd[78678]: Failed password for root from 70.84.72.68 port 38786 ssh2
Feb  1 08:24:02 freebsd sshd[78680]: Failed password for root from 70.84.72.68 port 39634 ssh2
Feb  1 08:24:04 freebsd sshd[78682]: Failed password for root from 70.84.72.68 port 40569 ssh2
Feb  1 08:24:07 freebsd sshd[78684]: Failed password for root from 70.84.72.68 port 41330 ssh2
Feb  1 08:24:09 freebsd sshd[78686]: Failed password for root from 70.84.72.68 port 42236 ssh2


代表有人在 Try ! 你的帳號和密碼  :wink:
我的學習筆記 http://www.itpro.tw/blog
EveryBody Splunk ~~ ^_^

rest

  • 懷疑的國中生
  • **
  • 文章數: 64
    • 檢視個人資料
security訊息
« 回覆 #3 於: 2005-02-02 10:08 »
感謝2位大大的回應
那請問如何限制ssh連線?
例如設定某ip或網段可以連線

感謝大大

Tim

  • 活潑的大學生
  • ***
  • 文章數: 450
  • 性別: 男
    • 檢視個人資料
    • http://www.lab.mlc.edu.tw/
security訊息
« 回覆 #4 於: 2005-02-02 11:11 »
nolan 已經提醒你了呀。
只不過沒提到是要去設定 /etc/hosts.allow 罷了。

rest

  • 懷疑的國中生
  • **
  • 文章數: 64
    • 檢視個人資料
security訊息
« 回覆 #5 於: 2005-02-02 11:56 »
了解
歹勢
看到了