はちゅにっき

こっちのブログはまったり更新

sshd へのアクセスが

sshd:
    Authentication Failures:
       unknown (222.208.232.138): 7837 Time(s)
       unknown (61.66.211.162): 2657 Time(s)
       root (222.208.232.138): 235 Time(s)
       root (61.66.211.162): 223 Time(s)
       unknown (220.182.62.252): 133 Time(s)
       root (222.55.184.241): 66 Time(s)
       root (219.232.241.9): 25 Time(s)
       backup (222.208.232.138): 19 Time(s)
       backup (61.66.211.162): 17 Time(s)
       news (222.208.232.138): 16 Time(s)
       root (220.182.62.252): 15 Time(s)
       bin (222.208.232.138): 12 Time(s)
       news (61.66.211.162): 11 Time(s)
       bin (61.66.211.162): 9 Time(s)
       lp (222.208.232.138): 9 Time(s)
       mail (222.208.232.138): 9 Time(s)
       nobody (222.208.232.138): 9 Time(s)
       ftp (222.208.232.138): 8 Time(s)
       postfix (222.208.232.138): 8 Time(s)
       games (222.208.232.138): 7 Time(s)
       nobody (61.66.211.162): 7 Time(s)
       sshd (222.208.232.138): 7 Time(s)
       irc (222.208.232.138): 6 Time(s)
       mail (61.66.211.162): 6 Time(s)
       postfix (61.66.211.162): 6 Time(s)
       sync (222.208.232.138): 6 Time(s)
       www-data (222.208.232.138): 6 Time(s)
       daemon (222.208.232.138): 5 Time(s)
       ftp (61.66.211.162): 5 Time(s)
       games (61.66.211.162): 5 Time(s)
       lp (61.66.211.162): 5 Time(s)
       sshd (61.66.211.162): 5 Time(s)
       sys (222.208.232.138): 5 Time(s)
       uucp (222.208.232.138): 5 Time(s)
       www-data (61.66.211.162): 4 Time(s)
       bind (222.208.232.138): 3 Time(s)
       daemon (61.66.211.162): 3 Time(s)
       irc (61.66.211.162): 3 Time(s)
       list (222.208.232.138): 3 Time(s)
       sync (61.66.211.162): 3 Time(s)
       sys (61.66.211.162): 3 Time(s)
       gnats (222.208.232.138): 2 Time(s)
       identd (222.208.232.138): 2 Time(s)
       man (222.208.232.138): 2 Time(s)
       proxy (222.208.232.138): 2 Time(s)
       unknown (219.238.180.98): 2 Time(s)
       uucp (61.66.211.162): 2 Time(s)
       backup (220.182.62.252): 1 Time(s)
       bin (220.182.62.252): 1 Time(s)
       bind (61.66.211.162): 1 Time(s)
       daemon (220.182.62.252): 1 Time(s)
       ftp (220.182.62.252): 1 Time(s)
       games (220.182.62.252): 1 Time(s)
       gnats (220.182.62.252): 1 Time(s)
       identd (220.182.62.252): 1 Time(s)
       irc (220.182.62.252): 1 Time(s)
       list (220.182.62.252): 1 Time(s)
       lp (220.182.62.252): 1 Time(s)
       mail (220.182.62.252): 1 Time(s)
       news (220.182.62.252): 1 Time(s)
       nobody (220.182.62.252): 1 Time(s)
       postfix (220.182.62.252): 1 Time(s)
       proxy (220.182.62.252): 1 Time(s)
       sshd (220.182.62.252): 1 Time(s)
       sync (220.182.62.252): 1 Time(s)
       sys (220.182.62.252): 1 Time(s)
       unknown (192.168.0.22): 1 Time(s)
       uucp (220.182.62.252): 1 Time(s)
       www-data (220.182.62.252): 1 Time(s)
    Invalid Users:
       Unknown Account: 10630 Time(s)

特定の国からのアクセスを遮断してもこのザマですか、そうですか。
めんどくさいから 22 番ポートで待ち受けてたけれど
こんだけアクセスがあるならポート番号変えようかなー。
まぁ一時しのぎにしかならないと思うけど。。。
メールサーバにも変なコネクションがたくさんくるし、困ったもんだ。。。