Please note the new address for this forum : forum.excito.org. The old address redirects here but I don't know for how long. Thanks !
New user's registration have been closed due to high spamming and low trafic on this forum. Please contact forum admins directly if you need an account. Thanks !

Search found 3 matches

by Jonssonlae
19 Jul 2013, 14:40
Forum: B2 & B3 Support
Topic: Is this a successful intrusion
Replies: 24
Views: 33012

Re: Is this a successful intrusion

Thanks for your replies. I have removed the sshd login option and changed my hostname, Will take me some time to think about sshd via the internet. Right now the log are 140 pages with four new people. Less than 2 seconds between the logs. Seeing that they use script now to crack the login. You are ...
by Jonssonlae
19 Jul 2013, 04:36
Forum: B2 & B3 Support
Topic: Is this a successful intrusion
Replies: 24
Views: 33012

Re: Is this a successful intrusion

Thanks for the reply. I have problems with intrusion attempts via sshd. A real stubborn source is

Jul 19 06:50:01 whatever sshd[9232]: reverse mapping checking getaddrinfo for [212.252.221.250] failed - POSSIBLE BREAK-IN ATTEMPT!
Jul 19 06:50:02 whatever CRON[9235]: pam_unix(cron:session): session ...
by Jonssonlae
16 Jul 2013, 18:30
Forum: B2 & B3 Support
Topic: Is this a successful intrusion
Replies: 24
Views: 33012

Is this a successful intrusion

Been looking through auth.log and found this. I call my hostname for whatever in this post.

Jul 16 22:46:25 whatever sshd[2172]: Received signal 15; terminating.
Jul 16 22:46:25 whatever sshd[593]: Server listening on 0.0.0.0 port 22.
Jul 16 22:46:25 whatever sshd[593]: Server listening on :: port ...