sshd へのアクセスが
sshd: Authentication Failures: unknown (222.208.232.138): 7837 Time(s) unknown (61.66.211.162): 2657 Time(s) root (222.208.232.138): 235 Time(s) root (61.66.211.162): 223 Time(s) unknown (220.182.62.252): 133 Time(s) root (222.55.184.241): 66 Time(s) root (219.232.241.9): 25 Time(s) backup (222.208.232.138): 19 Time(s) backup (61.66.211.162): 17 Time(s) news (222.208.232.138): 16 Time(s) root (220.182.62.252): 15 Time(s) bin (222.208.232.138): 12 Time(s) news (61.66.211.162): 11 Time(s) bin (61.66.211.162): 9 Time(s) lp (222.208.232.138): 9 Time(s) mail (222.208.232.138): 9 Time(s) nobody (222.208.232.138): 9 Time(s) ftp (222.208.232.138): 8 Time(s) postfix (222.208.232.138): 8 Time(s) games (222.208.232.138): 7 Time(s) nobody (61.66.211.162): 7 Time(s) sshd (222.208.232.138): 7 Time(s) irc (222.208.232.138): 6 Time(s) mail (61.66.211.162): 6 Time(s) postfix (61.66.211.162): 6 Time(s) sync (222.208.232.138): 6 Time(s) www-data (222.208.232.138): 6 Time(s) daemon (222.208.232.138): 5 Time(s) ftp (61.66.211.162): 5 Time(s) games (61.66.211.162): 5 Time(s) lp (61.66.211.162): 5 Time(s) sshd (61.66.211.162): 5 Time(s) sys (222.208.232.138): 5 Time(s) uucp (222.208.232.138): 5 Time(s) www-data (61.66.211.162): 4 Time(s) bind (222.208.232.138): 3 Time(s) daemon (61.66.211.162): 3 Time(s) irc (61.66.211.162): 3 Time(s) list (222.208.232.138): 3 Time(s) sync (61.66.211.162): 3 Time(s) sys (61.66.211.162): 3 Time(s) gnats (222.208.232.138): 2 Time(s) identd (222.208.232.138): 2 Time(s) man (222.208.232.138): 2 Time(s) proxy (222.208.232.138): 2 Time(s) unknown (219.238.180.98): 2 Time(s) uucp (61.66.211.162): 2 Time(s) backup (220.182.62.252): 1 Time(s) bin (220.182.62.252): 1 Time(s) bind (61.66.211.162): 1 Time(s) daemon (220.182.62.252): 1 Time(s) ftp (220.182.62.252): 1 Time(s) games (220.182.62.252): 1 Time(s) gnats (220.182.62.252): 1 Time(s) identd (220.182.62.252): 1 Time(s) irc (220.182.62.252): 1 Time(s) list (220.182.62.252): 1 Time(s) lp (220.182.62.252): 1 Time(s) mail (220.182.62.252): 1 Time(s) news (220.182.62.252): 1 Time(s) nobody (220.182.62.252): 1 Time(s) postfix (220.182.62.252): 1 Time(s) proxy (220.182.62.252): 1 Time(s) sshd (220.182.62.252): 1 Time(s) sync (220.182.62.252): 1 Time(s) sys (220.182.62.252): 1 Time(s) unknown (192.168.0.22): 1 Time(s) uucp (220.182.62.252): 1 Time(s) www-data (220.182.62.252): 1 Time(s) Invalid Users: Unknown Account: 10630 Time(s)
特定の国からのアクセスを遮断してもこのザマですか、そうですか。
めんどくさいから 22 番ポートで待ち受けてたけれど
こんだけアクセスがあるならポート番号変えようかなー。
まぁ一時しのぎにしかならないと思うけど。。。
メールサーバにも変なコネクションがたくさんくるし、困ったもんだ。。。