URL: https://www.opennet.me/cgi-bin/openforum/vsluhboard.cgi
Форум: vsluhforumID1
Нить номер: 88241
[ Назад ]

Исходное сообщение
"pure ftpd"
Отправлено rootkit , 25-Фев-10 05:13

Подскажите это что меня атакуют китайцы? что можно с этим сделать?
Feb 25 10:16:35 gw pure-ftpd: (?@60.217.229.222) [INFO] New connection from 60.217.229.222
Feb 25 10:16:36 gw pure-ftpd: (?@60.217.229.220) [WARNING] Authentication failed for user [administrator]
Feb 25 10:16:36 gw pure-ftpd: (?@60.217.229.228) [WARNING] Authentication failed for user [administrator]
Feb 25 10:16:36 gw pure-ftpd: (?@60.217.229.222) [WARNING] Authentication failed for user [administrator]
Feb 25 10:16:42 gw pure-ftpd: (?@60.217.229.222) [WARNING] Authentication failed for user [administrator]
Feb 25 10:16:47 gw named[672]: FORMERR resolving 'time.microsoft.akadns.net/A/IN': 91.189.160.3#53
Feb 25 10:16:49 gw pure-ftpd: (?@60.217.229.220) [WARNING] Authentication failed for user [administrator]
Feb 25 10:16:51 gw pure-ftpd: (?@60.217.229.222) [WARNING] Authentication failed for user [administrator]
Feb 25 10:16:51 gw pure-ftpd: (?@60.217.229.228) [WARNING] Authentication failed for user [administrator]
Feb 25 10:16:53 gw named[672]: FORMERR resolving 'dnl-04.geo.kaspersky.com/A/IN': 91.189.160.3#53
Feb 25 10:17:03 gw pure-ftpd: (?@60.217.229.222) [WARNING] Authentication failed for user [administrator]
Feb 25 10:17:07 gw pure-ftpd: (?@60.217.229.220) [ERROR] Too many authentication failures
Feb 25 10:17:07 gw kernel: Feb 25 10:17:07 gw pure-ftpd: (?@60.217.229.220) [ERROR] Too many authentication failures
Feb 25 10:17:08 gw pure-ftpd: (?@60.217.229.220) [INFO] New connection from 60.217.229.220
Feb 25 10:17:09 gw pure-ftpd: (?@60.217.229.220) [WARNING] Authentication failed for user [administrator]

Содержание

pure ftpd,PavelR, 06:53 , 25-Фев-10
pure ftpd,Warhead Wardick, 07:25 , 25-Фев-10

Сообщения в этом обсуждении

"pure ftpd"
Отправлено PavelR , 25-Фев-10 06:53

>[оверквотинг удален]
>
>Feb 25 10:16:53 gw named[672]: FORMERR resolving 'dnl-04.geo.kaspersky.com/A/IN': 91.189.160.3#53
>Feb 25 10:17:03 gw pure-ftpd: (?@60.217.229.222) [WARNING] Authentication failed for user [administrator]
>
>Feb 25 10:17:07 gw pure-ftpd: (?@60.217.229.220) [ERROR] Too many authentication failures
>Feb 25 10:17:07 gw kernel: Feb 25 10:17:07 gw pure-ftpd: (?@60.217.229.220) [ERROR]
>Too many authentication failures
>Feb 25 10:17:08 gw pure-ftpd: (?@60.217.229.220) [INFO] New connection from 60.217.229.220
>Feb 25 10:17:09 gw pure-ftpd: (?@60.217.229.220) [WARNING] Authentication failed for user [administrator]
>
Welcome to the real world.
(Пер. Добро пожаловать в реальный мир.)

"pure ftpd"
Отправлено Warhead Wardick , 25-Фев-10 07:25

>Подскажите это что меня атакуют китайцы? что можно с этим сделать?
Ну к примеру прикрутить че нить типа fall2ban ...