Nie jesteś zalogowany.
Jeśli nie posiadasz konta, zarejestruj je już teraz! Pozwoli Ci ono w pełni korzystać z naszego serwisu. Spamerom dziękujemy!

Ogłoszenie

Prosimy o pomoc dla małej Julki — przekaż 1% podatku na Fundacji Dzieciom zdazyć z Pomocą.
Więcej informacji na dug.net.pl/pomagamy/.

#1  2016-03-11 00:01:38

  ubnt - Użytkownik

ubnt
Użytkownik
Zarejestrowany: 2016-02-15

auth.log 'Connection closed by ip [preauth]'

Witam czy to próba włamania na vps?

Kod:

Mar 10 00:17:46 vps244818 sshd[4419]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:18:56 vps244818 sshd[4466]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:20:06 vps244818 sshd[4511]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:21:17 vps244818 sshd[4558]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:22:27 vps244818 sshd[4604]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:23:38 vps244818 sshd[4650]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:24:48 vps244818 sshd[4696]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:25:58 vps244818 sshd[4743]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:27:07 vps244818 sshd[4788]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:28:17 vps244818 sshd[4835]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:29:27 vps244818 sshd[4881]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:30:37 vps244818 sshd[4927]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:31:47 vps244818 sshd[4973]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:32:57 vps244818 sshd[5019]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:34:07 vps244818 sshd[5066]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:35:16 vps244818 sshd[5112]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:36:27 vps244818 sshd[5158]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:37:37 vps244818 sshd[5204]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:38:47 vps244818 sshd[5249]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:39:56 vps244818 sshd[5290]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:41:06 vps244818 sshd[5337]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:42:16 vps244818 sshd[5382]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:43:26 vps244818 sshd[5429]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:44:36 vps244818 sshd[5475]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:45:45 vps244818 sshd[5521]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:46:55 vps244818 sshd[5567]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:48:06 vps244818 sshd[5613]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:49:16 vps244818 sshd[5660]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:50:25 vps244818 sshd[5706]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:51:35 vps244818 sshd[5752]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:52:45 vps244818 sshd[5798]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:53:55 vps244818 sshd[5844]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:55:04 vps244818 sshd[5890]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:56:14 vps244818 sshd[5937]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:57:24 vps244818 sshd[5982]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:58:33 vps244818 sshd[6029]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:59:43 vps244818 sshd[6074]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:00:54 vps244818 sshd[6126]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:02:04 vps244818 sshd[6172]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:03:13 vps244818 sshd[6218]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:04:23 vps244818 sshd[6265]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:05:32 vps244818 sshd[6311]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:06:42 vps244818 sshd[6357]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:07:51 vps244818 sshd[6403]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:09:01 vps244818 sshd[6449]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:10:10 vps244818 sshd[6495]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:11:20 vps244818 sshd[6542]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:12:29 vps244818 sshd[6587]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:13:39 vps244818 sshd[6628]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:14:49 vps244818 sshd[6673]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:15:58 vps244818 sshd[6720]: Connection closed by 201.156.xxx.xxx [preauth]

Offline

 

#2  2016-03-11 00:09:51

  Jacekalex - Podobno człowiek...;)

Jacekalex
Podobno człowiek...;)
Skąd: /dev/random
Zarejestrowany: 2008-01-07

Re: auth.log 'Connection closed by ip [preauth]'

Na 1736% próba włamania, chociaż komunikat trochę dziwny.

Zobacz przez whois, skąd są te adresy, które tak ukrywasz.

Ostatnio edytowany przez Jacekalex (2016-03-11 00:10:28)


W demokracji każdy naród ma taką władzę, na jaką zasługuje ;)
Si vis pacem  para bellum  ;)       |       Pozdrawiam :)

Offline

 

Stopka forum

Powered by PunBB
© Copyright 2002–2005 Rickard Andersson
Nas ludzie lubią po prostu, a nie klikając w przyciski ;-)