Log ???

Forum dédié à la distribution du même nom et que vous pourrez télécharger sur http://www.contribs.org. La nouvelle version de cette distribution se nomme SME Server

Modérateur: modos Ixus

Log ???

Messagepar sisg » 25 Juin 2005 00:23

Bonjour à tous,

J'ai ces "log" dans mon SME depuis 2 jours est-ce que quelqu'un aurait une idée ? Suis-je en train de me faire hacker?

Jun 24 18:16:54 destinee sshd[7340]: Failed password for invalid user backup from 211.214.161.141 port 49051 ssh2
Jun 24 18:16:56 destinee sshd[7342]: Invalid user info from 211.214.161.141
Jun 24 18:16:56 destinee sshd[7342]: error: Could not get shadow information for NOUSER
Jun 24 18:16:56 destinee sshd[7342]: Failed password for invalid user info from 211.214.161.141 port 49130 ssh2
Jun 24 18:16:58 destinee sshd[7344]: Invalid user shop from 211.214.161.141
Jun 24 18:16:58 destinee sshd[7344]: error: Could not get shadow information for NOUSER
Jun 24 18:16:58 destinee sshd[7344]: Failed password for invalid user shop from 211.214.161.141 port 49199 ssh2
Jun 24 18:17:01 destinee sshd[7346]: Invalid user sales from 211.214.161.141
Jun 24 18:17:01 destinee sshd[7346]: error: Could not get shadow information for NOUSER
Jun 24 18:17:01 destinee sshd[7346]: Failed password for invalid user sales from 211.214.161.141 port 49273 ssh2
Jun 24 18:17:03 destinee sshd[7359]: Invalid user web from 211.214.161.141
Jun 24 18:17:03 destinee sshd[7359]: error: Could not get shadow information for NOUSER
Jun 24 18:17:03 destinee sshd[7359]: Failed password for invalid user web from 211.214.161.141 port 49339 ssh2
Jun 24 18:17:05 destinee sshd[7362]: Failed password for www from 211.214.161.141 port 49421 ssh2
Jun 24 18:17:07 destinee sshd[7364]: Invalid user wwwrun from 211.214.161.141
Jun 24 18:17:07 destinee sshd[7364]: error: Could not get shadow information for NOUSER
Jun 24 18:17:07 destinee sshd[7364]: Failed password for invalid user wwwrun from 211.214.161.141 port 49487 ssh2
Jun 24 18:17:09 destinee sshd[7366]: Invalid user adam from 211.214.161.141
Jun 24 18:17:09 destinee sshd[7366]: error: Could not get shadow information for NOUSER
Jun 24 18:17:09 destinee sshd[7366]: Failed password for invalid user adam from 211.214.161.141 port 49567 ssh2
Jun 24 18:17:11 destinee sshd[7368]: Invalid user stephen from 211.214.161.141
Jun 24 18:17:11 destinee sshd[7368]: error: Could not get shadow information for NOUSER
Jun 24 18:17:11 destinee sshd[7368]: Failed password for invalid user stephen from 211.214.161.141 port 49639 ssh2
Jun 24 18:17:13 destinee sshd[7370]: Invalid user richard from 211.214.161.141
Jun 24 18:17:13 destinee sshd[7370]: error: Could not get shadow information for NOUSER
Jun 24 18:17:13 destinee sshd[7370]: Failed password for invalid user richard from 211.214.161.141 port 49716 ssh2
Jun 24 18:17:15 destinee sshd[7373]: Invalid user george from 211.214.161.141
Jun 24 18:17:15 destinee sshd[7373]: error: Could not get shadow information for NOUSER
Jun 24 18:17:15 destinee sshd[7373]: Failed password for invalid user george from 211.214.161.141 port 49783 ssh2
Jun 24 18:17:18 destinee sshd[7375]: Invalid user michael from 211.214.161.141
Jun 24 18:17:18 destinee sshd[7375]: error: Could not get shadow information for NOUSER
Jun 24 18:17:18 destinee sshd[7375]: Failed password for invalid user michael from 211.214.161.141 port 49860 ssh2
Jun 24 18:17:20 destinee sshd[7377]: Invalid user john from 211.214.161.141
Jun 24 18:17:20 destinee sshd[7377]: error: Could not get shadow information for NOUSER
Jun 24 18:17:20 destinee sshd[7377]: Failed password for invalid user john from 211.214.161.141 port 49940 ssh2
Jun 24 18:17:22 destinee sshd[7379]: Invalid user david from 211.214.161.141
Jun 24 18:17:22 destinee sshd[7379]: error: Could not get shadow information for NOUSER
Jun 24 18:17:22 destinee sshd[7379]: Failed password for invalid user david from 211.214.161.141 port 50011 ssh2
Jun 24 18:17:24 destinee sshd[7381]: Invalid user paul from 211.214.161.141
Jun 24 18:17:24 destinee sshd[7381]: error: Could not get shadow information for NOUSER
Jun 24 18:17:24 destinee sshd[7381]: Failed password for invalid user paul from 211.214.161.141 port 50085 ssh2
Jun 24 18:17:26 destinee sshd[7384]: Failed password for news from 211.214.161.141 port 50159 ssh2
Jun 24 18:17:28 destinee sshd[7386]: Invalid user angel from 211.214.161.141
Jun 24 18:17:28 destinee sshd[7386]: error: Could not get shadow information for NOUSER
Jun 24 18:17:28 destinee sshd[7386]: Failed password for invalid user angel from 211.214.161.141 port 50232 ssh2
Jun 24 18:17:30 destinee sshd[7388]: Failed password for games from 211.214.161.141 port 50306 ssh2
Jun 24 18:17:32 destinee sshd[7390]: Invalid user pgsql from 211.214.161.141
Jun 24 18:17:32 destinee sshd[7390]: error: Could not get shadow information for NOUSER
Jun 24 18:17:32 destinee sshd[7390]: Failed password for invalid user pgsql from 211.214.161.141 port 50375 ssh2
Jun 24 18:17:35 destinee sshd[7392]: Invalid user pgsql from 211.214.161.141
Jun 24 18:17:35 destinee sshd[7392]: error: Could not get shadow information for NOUSER
Jun 24 18:17:35 destinee sshd[7392]: Failed password for invalid user pgsql from 211.214.161.141 port 50453 ssh2
Jun 24 18:17:37 destinee sshd[7395]: Failed password for mail from 211.214.161.141 port 50525 ssh2
Jun 24 18:17:39 destinee sshd[7397]: Failed password for adm from 211.214.161.141 port 50603 ssh2
Jun 24 18:17:41 destinee sshd[7399]: Invalid user ident from 211.214.161.141
Jun 24 18:17:41 destinee sshd[7399]: error: Could not get shadow information for NOUSER
Jun 24 18:17:41 destinee sshd[7399]: Failed password for invalid user ident from 211.214.161.141 port 50674 ssh2
Jun 24 18:17:43 destinee sshd[7401]: Invalid user resin from 211.214.161.141
Jun 24 18:17:43 destinee sshd[7401]: error: Could not get shadow information for NOUSER
Jun 24 18:17:43 destinee sshd[7401]: Failed password for invalid user resin from 211.214.161.141 port 50753 ssh2

Merci !

Snoopyski
- PIII 500Mhz = IPCop 1.4.10 + Advance Proxy + URL Filter en VERT-ROUGE-ORANGE
- Athlon 1800+ = SME Server 6.0.1 (Orange)
Serveur Web/MySQL/MamboServer/eGroupWare
- Athlon 2500+ = SME Server 7.0 RC3 (Green)
Avatar de l’utilisateur
sisg
Vice-Amiral
Vice-Amiral
 
Messages: 552
Inscrit le: 07 Août 2003 00:00
Localisation: Québec / Région Montréal

Messagepar micjack » 25 Juin 2005 00:38

Salut,

C'est tout à fait normal si tu as autorisé l'acces ssh de l'exterieur, y'aurra toujours des petits c** pour tenter n'importe quel pass et nom d'utilisateur pour entrer dans le systeme... Si tu en a pas besoin, desactive le du demarrage ...

Les tentative de hack sur ton systeme, me rappel ce post :wink:
http://forums.fr.ixus.net/viewtopic.php ... fc4#185354
micjack
Amiral
Amiral
 
Messages: 3113
Inscrit le: 06 Juin 2003 00:00
Localisation: Varois

Messagepar sisg » 25 Juin 2005 15:45

Merci beaucoup... c'est bien ce que je croyais...

Y'en n'as tu qui ont du temps à perdre non ?????? !!!!!

Bonne fin semaine,

Snoopyski
- PIII 500Mhz = IPCop 1.4.10 + Advance Proxy + URL Filter en VERT-ROUGE-ORANGE
- Athlon 1800+ = SME Server 6.0.1 (Orange)
Serveur Web/MySQL/MamboServer/eGroupWare
- Athlon 2500+ = SME Server 7.0 RC3 (Green)
Avatar de l’utilisateur
sisg
Vice-Amiral
Vice-Amiral
 
Messages: 552
Inscrit le: 07 Août 2003 00:00
Localisation: Québec / Région Montréal

Messagepar micjack » 25 Juin 2005 22:12

sisg a écrit:Y'en n'as tu qui ont du temps à perdre non ?????? !!!!!

Apprentis hackerz, mais à ne pas negliger non plus, mais de la à devenir un elite (on ne sait jamais, y'a un debut à tout, ils commencent par cette facon et en apprennent de plus en plus )
micjack
Amiral
Amiral
 
Messages: 3113
Inscrit le: 06 Juin 2003 00:00
Localisation: Varois


Retour vers E-Smith / SME Server

Qui est en ligne ?

Utilisateur(s) parcourant actuellement ce forum : Google [Bot] et 1 invité

cron