Asalamualikum,
i have following in my secure log /var/log/secure
Jan 23 09:39:28 pacific sshd[24999]: Invalid user wnn from 203.167.102.190
Jan 23 09:39:28 pacific sshd[24999]: reverse mapping checking getaddrinfo for 190.102.167.203.unassigned.static.eastern-tele.com failed - POSSIBLE BREAKIN ATTEMPT!
Jan 23 09:39:30 pacific sshd[24999]: Failed password for invalid user wnn from 203.167.102.190 port 56121 ssh2
Jan 23 21:10:31 pacific sshd[27824]: Did not receive identification string from 67.15.236.19
please provide what does the above lines mean, does that means someone try to attack "through my server" or "from another server to my server".
thanks
Best regds
mushtaq
/var/log/secure issue
/var/log/secure issue
Life is just a deception from truth
Re: /var/log/secure issue
Dear mushtaq,mushtaq wrote:Asalamualikum,
i have following in my secure log /var/log/secure
Jan 23 09:39:28 pacific sshd[24999]: Invalid user wnn from 203.167.102.190
Jan 23 09:39:28 pacific sshd[24999]: reverse mapping checking getaddrinfo for 190.102.167.203.unassigned.static.eastern-tele.com failed - POSSIBLE BREAKIN ATTEMPT!
Jan 23 09:39:30 pacific sshd[24999]: Failed password for invalid user wnn from 203.167.102.190 port 56121 ssh2
Jan 23 21:10:31 pacific sshd[27824]: Did not receive identification string from 67.15.236.19
please provide what does the above lines mean, does that means someone try to attack "through my server" or "from another server to my server".
thanks
Best regds
mushtaq
some body is trying to login in to your system change the port of sshd. or disable sshd
#service sshd stop
#chkconfig --levels 345 sshd off
Regards
Noman Liaquat Khanzada Rajput
Linux means productivity and fun.
We all love Linux, but it's also a fact that some people might not be able to migrate.
Re: howto
mushtaq wrote:Thanks noman bhai
please can you tell me how to change the port for my sshd ? just guide i will do it.
best regds
mushtaq
edit file /etc/ssh/sshd_config
and change Port 22 to any other
-
- Site Admin
- Posts: 5132
- Joined: Fri May 02, 2003 10:24 am
- Location: Karachi
- Contact:
Re:
Dear mushtaq,
Salam,
Use below command.
# sed -i 's/#Protocol 2,1/Protocol 2/' /etc/ssh/sshd_config
# /etc/init.d/sshd restart
Best Regards.
Salam,
Use below command.
# sed -i 's/#Protocol 2,1/Protocol 2/' /etc/ssh/sshd_config
# /etc/init.d/sshd restart
Best Regards.
Farrukh Ahmed
-
- Site Admin
- Posts: 5132
- Joined: Fri May 02, 2003 10:24 am
- Location: Karachi
- Contact:
Re:
indeed, he should allow specific ip address on his ssh portlambda wrote:that won't stop the attempts.
Farrukh Ahmed