Nie jesteś zalogowany.
Jeśli nie posiadasz konta, zarejestruj je już teraz! Pozwoli Ci ono w pełni korzystać z naszego serwisu. Spamerom dziękujemy!

Ogłoszenie

Prosimy o pomoc dla małej Julki — przekaż 1% podatku na Fundacji Dzieciom zdazyć z Pomocą.
Więcej informacji na dug.net.pl/pomagamy/.

Strony: 1

 

#1  2016-03-11 00:01:38

  ubnt - Użytkownik

ubnt
Użytkownik
Zarejestrowany: 2016-02-15

auth.log 'Connection closed by ip [preauth]'

Witam czy to próba włamania na vps?

Kod:

Mar 10 00:17:46 vps244818 sshd[4419]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:18:56 vps244818 sshd[4466]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:20:06 vps244818 sshd[4511]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:21:17 vps244818 sshd[4558]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:22:27 vps244818 sshd[4604]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:23:38 vps244818 sshd[4650]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:24:48 vps244818 sshd[4696]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:25:58 vps244818 sshd[4743]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:27:07 vps244818 sshd[4788]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:28:17 vps244818 sshd[4835]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:29:27 vps244818 sshd[4881]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:30:37 vps244818 sshd[4927]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:31:47 vps244818 sshd[4973]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:32:57 vps244818 sshd[5019]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:34:07 vps244818 sshd[5066]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:35:16 vps244818 sshd[5112]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:36:27 vps244818 sshd[5158]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:37:37 vps244818 sshd[5204]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:38:47 vps244818 sshd[5249]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:39:56 vps244818 sshd[5290]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:41:06 vps244818 sshd[5337]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:42:16 vps244818 sshd[5382]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:43:26 vps244818 sshd[5429]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:44:36 vps244818 sshd[5475]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:45:45 vps244818 sshd[5521]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:46:55 vps244818 sshd[5567]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:48:06 vps244818 sshd[5613]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:49:16 vps244818 sshd[5660]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:50:25 vps244818 sshd[5706]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:51:35 vps244818 sshd[5752]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:52:45 vps244818 sshd[5798]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:53:55 vps244818 sshd[5844]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:55:04 vps244818 sshd[5890]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:56:14 vps244818 sshd[5937]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:57:24 vps244818 sshd[5982]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:58:33 vps244818 sshd[6029]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 00:59:43 vps244818 sshd[6074]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:00:54 vps244818 sshd[6126]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:02:04 vps244818 sshd[6172]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:03:13 vps244818 sshd[6218]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:04:23 vps244818 sshd[6265]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:05:32 vps244818 sshd[6311]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:06:42 vps244818 sshd[6357]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:07:51 vps244818 sshd[6403]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:09:01 vps244818 sshd[6449]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:10:10 vps244818 sshd[6495]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:11:20 vps244818 sshd[6542]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:12:29 vps244818 sshd[6587]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:13:39 vps244818 sshd[6628]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:14:49 vps244818 sshd[6673]: Connection closed by 201.156.xxx.xxx [preauth]
Mar 10 01:15:58 vps244818 sshd[6720]: Connection closed by 201.156.xxx.xxx [preauth]

Offline

 

#2  2016-03-11 00:09:51

  Jacekalex - Podobno człowiek...;)

Jacekalex
Podobno człowiek...;)
Skąd: /dev/urandom
Zarejestrowany: 2008-01-07

Re: auth.log 'Connection closed by ip [preauth]'

Na 1736% próba włamania, chociaż komunikat trochę dziwny.

Zobacz przez whois, skąd są te adresy, które tak ukrywasz.

Ostatnio edytowany przez Jacekalex (2016-03-11 00:10:28)

W demokracji każdy naród ma taką władzę, na jaką zasługuje ;)
Si vis pacem  para bellum  ;)       |       Pozdrawiam :)

Offline

 

 

Strony: 1

Stopka forum

Powered by PunBB
© Copyright 2002–2005 Rickard Andersson
To nie jest tylko forum, to nasza mała ojczyzna ;-)

[ Generated in 0.016 seconds, 18 queries executed ]

Informacje debugowania

Time (s) Query
0.00013 SET CHARSET latin2
0.00004 SET NAMES latin2
0.00117 SELECT u.*, g.*, o.logged FROM punbb_users AS u INNER JOIN punbb_groups AS g ON u.group_id=g.g_id LEFT JOIN punbb_online AS o ON o.ident='3.149.29.98' WHERE u.id=1
0.00095 UPDATE punbb_online SET logged=1732761859 WHERE ident='3.149.29.98'
0.00059 SELECT * FROM punbb_online WHERE logged<1732761559
0.00251 DELETE FROM punbb_online WHERE ident='18.188.227.64'
0.00074 DELETE FROM punbb_online WHERE ident='18.226.226.151'
0.00069 DELETE FROM punbb_online WHERE ident='18.227.114.218'
0.00073 DELETE FROM punbb_online WHERE ident='185.191.171.12'
0.00071 DELETE FROM punbb_online WHERE ident='3.12.152.102'
0.00072 DELETE FROM punbb_online WHERE ident='3.141.198.147'
0.00075 DELETE FROM punbb_online WHERE ident='54.36.148.168'
0.00078 SELECT topic_id FROM punbb_posts WHERE id=299011
0.00105 SELECT id FROM punbb_posts WHERE topic_id=28379 ORDER BY posted
0.00094 SELECT t.subject, t.closed, t.num_replies, t.sticky, f.id AS forum_id, f.forum_name, f.moderators, fp.post_replies, 0 FROM punbb_topics AS t INNER JOIN punbb_forums AS f ON f.id=t.forum_id LEFT JOIN punbb_forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id=3) WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id=28379 AND t.moved_to IS NULL
0.00005 SELECT search_for, replace_with FROM punbb_censoring
0.00077 SELECT u.email, u.title, u.url, u.location, u.use_avatar, u.signature, u.email_setting, u.num_posts, u.registered, u.admin_note, p.id, p.poster AS username, p.poster_id, p.poster_ip, p.poster_email, p.message, p.hide_smilies, p.posted, p.edited, p.edited_by, g.g_id, g.g_user_title, o.user_id AS is_online FROM punbb_posts AS p INNER JOIN punbb_users AS u ON u.id=p.poster_id INNER JOIN punbb_groups AS g ON g.g_id=u.group_id LEFT JOIN punbb_online AS o ON (o.user_id=u.id AND o.user_id!=1 AND o.idle=0) WHERE p.topic_id=28379 ORDER BY p.id LIMIT 0,25
0.00091 UPDATE punbb_topics SET num_views=num_views+1 WHERE id=28379
Total query time: 0.01423 s