There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
Linux and Unix
Go to first new post What is the best free Linux operating sy ...
Go to first new post ubuntu no wireless connection
Go to first new post Debain, VNC server connection issues
Go to first new post which wifi USB device to buy for backtra ...
Go to first new post Ubuntu try hd (0,0) error prefix is not ...
Go to first new post Solved: What is the lightest distro for ...
Tag Cloud
access acer asus bios bsod computer crash driver drivers error ethernet excel freeze gaming google gpu graphics hard drive hardware hdmi internet laptop malware memory modem monitor motherboard network printer problem ram registry repair router security slow software sound trojan usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Operating Systems > Linux and Unix >
Did someone try to hack my box?

Reply  
Thread Tools
-Bender-'s Avatar
Member with 50 posts.
  
Join Date: May 2004
Location: A Small Town in Canada
10-Feb-2005, 06:21 PM #1
Did someone try to hack my box?
Hello im still kinda new to linux so im not sure what this is but /var/log/messages had thease entrys:
Code:
Feb 10 08:49:57 comp0 sshd[2686]: Illegal user russ from 218.149.129.177
Feb 10 08:49:57 comp0 sshd[2686]: Failed password for illegal user russ from 218.149.129.177 port 33907 ssh2
Feb 10 08:50:00 comp0 sshd[2688]: Illegal user russ from 218.149.129.177
Feb 10 08:50:00 comp0 sshd[2688]: Failed password for illegal user russ from 218.149.129.177 port 34063 ssh2
Feb 10 08:50:03 comp0 sshd[2690]: Illegal user russ from 218.149.129.177
Feb 10 08:50:03 comp0 sshd[2690]: Failed password for illegal user russ from 218.149.129.177 port 34264 ssh2
Feb 10 08:50:08 comp0 sshd[2692]: Illegal user russ from 218.149.129.177
Feb 10 08:50:08 comp0 sshd[2692]: Failed password for illegal user russ from 218.149.129.177 port 34426 ssh2
Feb 10 08:50:11 comp0 sshd[2694]: Illegal user devil from 218.149.129.177
Feb 10 08:50:11 comp0 sshd[2694]: Failed password for illegal user devil from 218.149.129.177 port 34723 ssh2
Feb 10 08:50:14 comp0 sshd[2696]: Illegal user devil from 218.149.129.177
Feb 10 08:50:14 comp0 sshd[2696]: Failed password for illegal user devil from 218.149.129.177 port 34949 ssh2
Feb 10 08:50:17 comp0 sshd[2698]: Illegal user devil from 218.149.129.177
Feb 10 08:50:17 comp0 sshd[2698]: Failed password for illegal user devil from 218.149.129.177 port 35102 ssh2
Feb 10 08:50:19 comp0 sshd[2700]: Illegal user devil from 218.149.129.177
Feb 10 08:50:19 comp0 sshd[2700]: Failed password for illegal user devil from 218.149.129.177 port 35254 ssh2
Feb 10 08:50:22 comp0 sshd[2702]: Illegal user jimmy from 218.149.129.177
Feb 10 08:50:22 comp0 sshd[2702]: Failed password for illegal user jimmy from 218.149.129.177 port 35384 ssh2
Feb 10 08:50:24 comp0 sshd[2704]: Illegal user jimmy from 218.149.129.177
Feb 10 08:50:24 comp0 sshd[2704]: Failed password for illegal user jimmy from 218.149.129.177 port 35526 ssh2
Feb 10 08:50:28 comp0 sshd[2706]: Illegal user jimmy from 218.149.129.177
Feb 10 08:50:28 comp0 sshd[2706]: Failed password for illegal user jimmy from 218.149.129.177 port 35672 ssh2
Feb 10 08:50:30 comp0 sshd[2708]: Illegal user jimmy from 218.149.129.177
Feb 10 08:50:30 comp0 sshd[2708]: Failed password for illegal user jimmy from 218.149.129.177 port 35890 ssh2
Feb 10 08:50:37 comp0 sshd[2710]: Illegal user seby from 218.149.129.177
Feb 10 08:50:37 comp0 sshd[2710]: Failed password for illegal user seby from 218.149.129.177 port 36029 ssh2
Feb 10 08:50:40 comp0 sshd[2712]: Illegal user seby from 218.149.129.177
Feb 10 08:50:40 comp0 sshd[2712]: Failed password for illegal user seby from 218.149.129.177 port 36418 ssh2
Feb 10 08:50:42 comp0 sshd[2714]: Illegal user seby from 218.149.129.177
Feb 10 08:50:42 comp0 sshd[2714]: Failed password for illegal user seby from 218.149.129.177 port 36557 ssh2
Feb 10 08:50:44 comp0 sshd[2716]: Illegal user seby from 218.149.129.177
Feb 10 08:50:44 comp0 sshd[2716]: Failed password for illegal user seby from 218.149.129.177 port 36673 ssh2
Feb 10 08:50:48 comp0 sshd[2718]: Illegal user saad from 218.149.129.177
Feb 10 08:50:48 comp0 sshd[2718]: Failed password for illegal user saad from 218.149.129.177 port 36814 ssh2
Feb 10 08:50:51 comp0 sshd[2720]: Illegal user saad from 218.149.129.177
Feb 10 08:50:51 comp0 sshd[2720]: Failed password for illegal user saad from 218.149.129.177 port 36995 ssh2
Feb 10 08:50:54 comp0 sshd[2722]: Illegal user saad from 218.149.129.177
Feb 10 08:50:54 comp0 sshd[2722]: Failed password for illegal user saad from 218.149.129.177 port 37201 ssh2
Feb 10 08:50:57 comp0 sshd[2724]: Illegal user saad from 218.149.129.177
Feb 10 08:50:57 comp0 sshd[2724]: Failed password for illegal user saad from 218.149.129.177 port 37343 ssh2
Feb 10 08:51:01 comp0 sshd[2726]: Illegal user danny from 218.149.129.177
Feb 10 08:51:01 comp0 sshd[2726]: Failed password for illegal user danny from 218.149.129.177 port 37494 ssh2
Feb 10 08:51:04 comp0 sshd[2728]: Illegal user danny from 218.149.129.177
Feb 10 08:51:04 comp0 sshd[2728]: Failed password for illegal user danny from 218.149.129.177 port 37759 ssh2
Feb 10 08:51:11 comp0 sshd[2730]: Illegal user danny from 218.149.129.177
Feb 10 08:51:11 comp0 sshd[2730]: Failed password for illegal user danny from 218.149.129.177 port 38181 ssh2
Feb 10 08:51:14 comp0 sshd[2732]: Illegal user danny from 218.149.129.177
Feb 10 08:51:14 comp0 sshd[2732]: Failed password for illegal user danny from 218.149.129.177 port 38315 ssh2
Feb 10 08:51:16 comp0 sshd[2734]: Illegal user bruce from 218.149.129.177
Feb 10 08:51:16 comp0 sshd[2734]: Failed password for illegal user bruce from 218.149.129.177 port 38466 ssh2
Feb 10 08:51:19 comp0 sshd[2736]: Illegal user bruce from 218.149.129.177
Feb 10 08:51:19 comp0 sshd[2736]: Failed password for illegal user bruce from 218.149.129.177 port 38596 ssh2
Feb 10 08:51:21 comp0 sshd[2738]: Illegal user bruce from 218.149.129.177
Feb 10 08:51:21 comp0 sshd[2738]: Failed password for illegal user bruce from 218.149.129.177 port 38732 ssh2
Feb 10 08:51:24 comp0 sshd[2740]: Illegal user bruce from 218.149.129.177
Feb 10 08:51:24 comp0 sshd[2740]: Failed password for illegal user bruce from 218.149.129.177 port 38867 ssh2
Feb 10 08:51:30 comp0 sshd[2742]: Illegal user rick from 218.149.129.177
Feb 10 08:51:30 comp0 sshd[2742]: Failed password for illegal user rick from 218.149.129.177 port 39011 ssh2
Feb 10 08:51:32 comp0 sshd[2744]: Illegal user rick from 218.149.129.177
Feb 10 08:51:32 comp0 sshd[2744]: Failed password for illegal user rick from 218.149.129.177 port 39335 ssh2
Feb 10 08:51:36 comp0 sshd[2746]: Illegal user rick from 218.149.129.177
Feb 10 08:51:36 comp0 sshd[2746]: Failed password for illegal user rick from 218.149.129.177 port 39475 ssh2
Feb 10 08:51:38 comp0 sshd[2748]: Illegal user rick from 218.149.129.177
Feb 10 08:51:38 comp0 sshd[2748]: Failed password for illegal user rick from 218.149.129.177 port 39653 ssh2
Feb 10 08:51:41 comp0 sshd[2750]: Illegal user eric from 218.149.129.177
Feb 10 08:51:41 comp0 sshd[2750]: Failed password for illegal user eric from 218.149.129.177 port 39786 ssh2
Feb 10 08:51:43 comp0 sshd[2752]: Illegal user eric from 218.149.129.177
Feb 10 08:51:43 comp0 sshd[2752]: Failed password for illegal user eric from 218.149.129.177 port 39922 ssh2
Feb 10 08:51:47 comp0 sshd[2754]: Illegal user eric from 218.149.129.177
Feb 10 08:51:47 comp0 sshd[2754]: Failed password for illegal user eric from 218.149.129.177 port 40075 ssh2
Feb 10 08:51:49 comp0 sshd[2756]: Illegal user eric from 218.149.129.177
Feb 10 08:51:49 comp0 sshd[2756]: Failed password for illegal user eric from 218.149.129.177 port 40243 ssh2
Feb 10 08:51:51 comp0 sshd[2758]: Illegal user robert from 218.149.129.177
Feb 10 08:51:51 comp0 sshd[2758]: Failed password for illegal user robert from 218.149.129.177 port 40375 ssh2
Feb 10 08:51:57 comp0 sshd[2760]: Illegal user robert from 218.149.129.177
Feb 10 08:51:57 comp0 sshd[2760]: Failed password for illegal user robert from 218.149.129.177 port 40496 ssh2
Feb 10 08:51:59 comp0 sshd[2762]: Illegal user robert from 218.149.129.177
Feb 10 08:51:59 comp0 sshd[2762]: Failed password for illegal user robert from 218.149.129.177 port 40812 ssh2
Feb 10 08:52:02 comp0 sshd[2764]: Illegal user robert from 218.149.129.177
Feb 10 08:52:02 comp0 sshd[2764]: Failed password for illegal user robert from 218.149.129.177 port 40938 ssh2
Feb 10 08:52:05 comp0 sshd[2766]: Illegal user filip from 218.149.129.177
Feb 10 08:52:05 comp0 sshd[2766]: Failed password for illegal user filip from 218.149.129.177 port 41082 ssh2
Feb 10 08:52:07 comp0 sshd[2768]: Illegal user filip from 218.149.129.177
Feb 10 08:52:07 comp0 sshd[2768]: Failed password for illegal user filip from 218.149.129.177 port 41213 ssh2
Feb 10 08:52:10 comp0 sshd[2770]: Illegal user filip from 218.149.129.177
Feb 10 08:52:10 comp0 sshd[2770]: Failed password for illegal user filip from 218.149.129.177 port 41339 ssh2
Feb 10 08:52:14 comp0 sshd[2772]: Illegal user filip from 218.149.129.177
Feb 10 08:52:14 comp0 sshd[2772]: Failed password for illegal user filip from 218.149.129.177 port 41572 ssh2
Feb 10 08:52:20 comp0 sshd[2774]: Illegal user harley from 218.149.129.177
Feb 10 08:52:20 comp0 sshd[2774]: Failed password for illegal user harley from 218.149.129.177 port 41727 ssh2
Feb 10 08:52:23 comp0 sshd[2776]: Illegal user harley from 218.149.129.177
Feb 10 08:52:23 comp0 sshd[2776]: Failed password for illegal user harley from 218.149.129.177 port 42053 ssh2
Feb 10 08:52:26 comp0 sshd[2778]: Illegal user harley from 218.149.129.177
Feb 10 08:52:26 comp0 sshd[2778]: Failed password for illegal user harley from 218.149.129.177 port 42258 ssh2
Feb 10 08:52:28 comp0 sshd[2780]: Illegal user harley from 218.149.129.177
Feb 10 08:52:28 comp0 sshd[2780]: Failed password for illegal user harley from 218.149.129.177 port 42393 ssh2
Feb 10 08:52:31 comp0 sshd[2782]: Illegal user fox from 218.149.129.177
Feb 10 08:52:31 comp0 sshd[2782]: Failed password for illegal user fox from 218.149.129.177 port 42519 ssh2
Feb 10 08:52:33 comp0 sshd[2784]: Illegal user fox from 218.149.129.177
Feb 10 08:52:33 comp0 sshd[2784]: Failed password for illegal user fox from 218.149.129.177 port 42648 ssh2
Feb 10 08:52:36 comp0 sshd[2786]: Illegal user fox from 218.149.129.177
Feb 10 08:52:36 comp0 sshd[2786]: Failed password for illegal user fox from 218.149.129.177 port 42773 ssh2
Feb 10 08:52:38 comp0 sshd[2788]: Illegal user fox from 218.149.129.177
Feb 10 08:52:38 comp0 sshd[2788]: Failed password for illegal user fox from 218.149.129.177 port 42921 ssh2
Feb 10 08:52:41 comp0 sshd[2790]: Illegal user foxy from 218.149.129.177
Feb 10 08:52:41 comp0 sshd[2790]: Failed password for illegal user foxy from 218.149.129.177 port 43057 ssh2
Feb 10 08:52:43 comp0 sshd[2792]: Illegal user foxy from 218.149.129.177
Feb 10 08:52:43 comp0 sshd[2792]: Failed password for illegal user foxy from 218.149.129.177 port 43178 ssh2
Feb 10 08:52:46 comp0 sshd[2794]: Illegal user foxy from 218.149.129.177
Feb 10 08:52:46 comp0 sshd[2794]: Failed password for illegal user foxy from 218.149.129.177 port 43307 ssh2
Feb 10 08:52:51 comp0 sshd[2796]: Illegal user foxy from 218.149.129.177
Feb 10 08:52:51 comp0 sshd[2796]: Failed password for illegal user foxy from 218.149.129.177 port 43430 ssh2
Feb 10 08:52:54 comp0 sshd[2798]: Illegal user stephen from 218.149.129.177
Feb 10 08:52:54 comp0 sshd[2798]: Failed password for illegal user stephen from 218.149.129.177 port 43727 ssh2
Feb 10 08:52:56 comp0 sshd[2800]: Illegal user stephen from 218.149.129.177
Feb 10 08:52:56 comp0 sshd[2800]: Failed password for illegal user stephen from 218.149.129.177 port 43870 ssh2
Feb 10 08:52:59 comp0 sshd[2802]: Illegal user stephen from 218.149.129.177
Feb 10 08:52:59 comp0 sshd[2802]: Failed password for illegal user stephen from 218.149.129.177 port 44003 ssh2
Feb 10 08:53:01 comp0 sshd[2804]: Illegal user stephen from 218.149.129.177
Feb 10 08:53:01 comp0 sshd[2804]: Failed password for illegal user stephen from 218.149.129.177 port 44142 ssh2
Feb 10 08:53:04 comp0 sshd[2806]: Illegal user stephanie from 218.149.129.177
Feb 10 08:53:04 comp0 sshd[2806]: Failed password for illegal user stephanie from 218.149.129.177 port 44275 ssh2
Feb 10 08:53:07 comp0 sshd[2808]: Illegal user stephanie from 218.149.129.177
Feb 10 08:53:07 comp0 sshd[2808]: Failed password for illegal user stephanie from 218.149.129.177 port 44417 ssh2
Feb 10 08:53:16 comp0 sshd[2810]: Illegal user stephanie from 218.149.129.177
Feb 10 08:53:16 comp0 sshd[2810]: Failed password for illegal user stephanie from 218.149.129.177 port 44535 ssh2
Feb 10 08:53:18 comp0 sshd[2812]: Illegal user stephanie from 218.149.129.177
Feb 10 08:53:18 comp0 sshd[2812]: Failed password for illegal user stephanie from 218.149.129.177 port 45005 ssh2
Feb 10 08:53:20 comp0 sshd[2814]: Illegal user lisa from 218.149.129.177
Feb 10 08:53:20 comp0 sshd[2814]: Failed password for illegal user lisa from 218.149.129.177 port 45121 ssh2
Feb 10 08:53:23 comp0 sshd[2816]: Illegal user lisa from 218.149.129.177
Feb 10 08:53:23 comp0 sshd[2816]: Failed password for illegal user lisa from 218.149.129.177 port 45239 ssh2
Feb 10 08:53:25 comp0 sshd[2818]: Illegal user lisa from 218.149.129.177
Feb 10 08:53:25 comp0 sshd[2818]: Failed password for illegal user lisa from 218.149.129.177 port 45373 ssh2
Feb 10 08:53:28 comp0 sshd[2820]: Illegal user lisa from 218.149.129.177
Feb 10 08:53:28 comp0 sshd[2820]: Failed password for illegal user lisa from 218.149.129.177 port 45486 ssh2
Feb 10 08:53:30 comp0 sshd[2822]: Illegal user adrian from 218.149.129.177
Feb 10 08:53:30 comp0 sshd[2822]: Failed password for illegal user adrian from 218.149.129.177 port 45610 ssh2
Feb 10 08:53:33 comp0 sshd[2824]: Illegal user adrian from 218.149.129.177
Feb 10 08:53:33 comp0 sshd[2824]: Failed password for illegal user adrian from 218.149.129.177 port 45738 ssh2
Feb 10 08:53:46 comp0 sshd[2826]: Illegal user adrian from 218.149.129.177
Feb 10 08:53:46 comp0 sshd[2826]: Failed password for illegal user adrian from 218.149.129.177 port 46384 ssh2
Feb 10 08:53:48 comp0 sshd[2828]: Illegal user adrian from 218.149.129.177
Feb 10 08:53:48 comp0 sshd[2828]: Failed password for illegal user adrian from 218.149.129.177 port 46521 ssh2
Feb 10 08:53:51 comp0 sshd[2830]: Illegal user douglas from 218.149.129.177
Feb 10 08:53:51 comp0 sshd[2830]: Failed password for illegal user douglas from 218.149.129.177 port 46648 ssh2
Feb 10 08:53:54 comp0 sshd[2832]: Illegal user douglas from 218.149.129.177
Feb 10 08:53:54 comp0 sshd[2832]: Failed password for illegal user douglas from 218.149.129.177 port 46765 ssh2
Feb 10 08:53:56 comp0 sshd[2834]: Illegal user douglas from 218.149.129.177
Feb 10 08:53:56 comp0 sshd[2834]: Failed password for illegal user douglas from 218.149.129.177 port 46899 ssh2
Feb 10 08:53:59 comp0 sshd[2836]: Illegal user douglas from 218.149.129.177
Feb 10 08:53:59 comp0 sshd[2836]: Failed password for illegal user douglas from 218.149.129.177 port 47030 ssh2
Feb 10 08:54:01 comp0 sshd[2838]: Illegal user doug from 218.149.129.177
Feb 10 08:54:01 comp0 sshd[2838]: Failed password for illegal user doug from 218.149.129.177 port 47137 ssh2
Feb 10 08:54:08 comp0 sshd[2840]: Illegal user doug from 218.149.129.177
Feb 10 08:54:08 comp0 sshd[2840]: Failed password for illegal user doug from 218.149.129.177 port 47259 ssh2
Feb 10 08:54:10 comp0 sshd[2842]: Illegal user doug from 218.149.129.177
Feb 10 08:54:10 comp0 sshd[2842]: Failed password for illegal user doug from 218.149.129.177 port 47560 ssh2
Feb 10 08:54:17 comp0 sshd[2844]: Illegal user doug from 218.149.129.177
Feb 10 08:54:17 comp0 sshd[2844]: Failed password for illegal user doug from 218.149.129.177 port 47673 ssh2
Feb 10 08:54:20 comp0 sshd[2846]: Illegal user nora from 218.149.129.177
Feb 10 08:54:20 comp0 sshd[2846]: Failed password for illegal user nora from 218.149.129.177 port 48023 ssh2
Feb 10 08:54:23 comp0 sshd[2848]: Illegal user nora from 218.149.129.177
Feb 10 08:54:23 comp0 sshd[2848]: Failed password for illegal user nora from 218.149.129.177 port 48163 ssh2
Feb 10 08:54:26 comp0 sshd[2850]: Illegal user nora from 218.149.129.177
Feb 10 08:54:26 comp0 sshd[2850]: Failed password for illegal user nora from 218.149.129.177 port 48309 ssh2
Feb 10 08:54:30 comp0 sshd[2852]: Illegal user nora from 218.149.129.177
Feb 10 08:54:30 comp0 sshd[2852]: Failed password for illegal user nora from 218.149.129.177 port 48450 ssh2
Feb 10 08:54:32 comp0 sshd[2854]: Illegal user april from 218.149.129.177
Feb 10 08:54:32 comp0 sshd[2854]: Failed password for illegal user april from 218.149.129.177 port 48622 ssh2
Feb 10 08:54:35 comp0 sshd[2856]: Illegal user april from 218.149.129.177
Feb 10 08:54:35 comp0 sshd[2856]: Failed password for illegal user april from 218.149.129.177 port 48738 ssh2
It looked like someone was trying to access my computer through ssh should i be concerned about this? My distro is slackware 10 using 2.4.xx kernel
Register for free to hide this ad!
tsunam's Avatar
Senior Member with 1,246 posts.
  
Join Date: Sep 2003
Experience: Linux~su
10-Feb-2005, 08:17 PM #2
That is a fairly normal scriptkiddy script. Basically it takes common user names and passwords and trys to see who they can get into, by sniffing out who has the default ssh port (22) open. Your best bet to avoid those is to a) change the port ssh uses. It should be in /etc/ssh/ there you want to edit ssh_config and sshd_config, change the port and uncomment the Protocol 2 and have it only as 2. that will stop the attacks.

However you are fine as long as you don't use common usernames and passwords


Edit: also uncomment the PermitRootLogin no, and for added security you can make authorized keys to log in so that you have to have the key to login. I'd have to find the tutorial on that though.
__________________
Gentoo Developer, and 64bit os user

"In feeding Mother Nature, you are fed in return" - Tsunam (2005). Concerning water conservation, and raising water tables.
Last edited by tsunam; 10-Feb-2005 at 08:22 PM..
tsunam's Avatar
Senior Member with 1,246 posts.
  
Join Date: Sep 2003
Experience: Linux~su
10-Feb-2005, 08:59 PM #3
And just for the fun of it, since it all came from one address (no doubt a zombie) but here is the info about the host

; <<>> DiG 9.2.3 <<>> 218.149.129.177
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45699
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;218.149.129.177. IN A

;; AUTHORITY SECTION:
. 10750 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2005021000 1800 900 604800 86400

;; Query time: 41 msec
;; SERVER: 10.100.19.254#53(10.100.19.254)
;; WHEN: Thu Feb 10 16:58:12 2005
;; MSG SIZE rcvd: 108
__________________
Gentoo Developer, and 64bit os user

"In feeding Mother Nature, you are fed in return" - Tsunam (2005). Concerning water conservation, and raising water tables.
-Bender-'s Avatar
Member with 50 posts.
  
Join Date: May 2004
Location: A Small Town in Canada
11-Feb-2005, 08:49 PM #4
thanks for the quick reply, i change my ssh port number and havnt had anymore problems like this Thanks you
asdfqwerty's Avatar
Member with 59 posts.
  
Join Date: Feb 2005
Experience: Advanced
13-Feb-2005, 12:25 PM #5
If I change my SSH port, can someone still SSH into my box with the command

ssh -Y name@host

or would they have to specify the new port number?

Just wondering.
tsunam's Avatar
Senior Member with 1,246 posts.
  
Join Date: Sep 2003
Experience: Linux~su
13-Feb-2005, 08:08 PM #6
ssh -Y name@host -p 1234

p is for port
myluvnttl's Avatar
Member with 33 posts.
  
Join Date: Aug 2004
Experience: Advanced
14-Feb-2005, 02:36 AM #7
Domain WhoIs Record for
(218.149.129.177)

Organization information
KOREA TELECOM
Network Management Center
country: KR

Net-Range
218.144.0.0 - 218.159.255.255

Technical contact
person: Dong-Joo Lee
address: 128-9 Yeong-Dong Jongro-Ku Seoul
address: Network Management Center
country: KR
phone: +82-2-766-1407
fax-no: +82-2-766-6008
e-mail: ip@ns.kornet.net
tdi_veedub's Avatar
Senior Member with 590 posts.
  
Join Date: Jan 2004
15-Feb-2005, 10:02 PM #8
If possible, your best bet would be to block everything from Korea and China. That is where most SSH attacks and email spam comes from. Since I have blocked all korean and chinese subnets, most of my /var/log/messages is just -- MARK -- .... Maybe not a good long term solution, but for now it does the trick.
__________________
Computer specs:
----------------------------------
Dell XPS 1530
Centrino 7500 2.2Ghz
GeForce 8600GT
120GB/2GB
Email This Email  Print This Print  Tweet This Send to Facebook Send to MySpace Send to StumbleUpon Digg This | More Services More
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!

« Previous Thread | Linux and Unix | Next Thread »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
Contact Us - HelpOnThe.Net - Archive - Terms of Service - Top
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 06:21 AM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

 Powered by Cermak Technologies, Inc.