From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux@vlink.ru>
Date: Tue, 12 Oct 2004 11:21:07 +0400
From: Barabashka <linux@vlink.ru>
To: community@altlinux.ru
Subject: Re: [Comm] SSHD
Message-ID: <20041012072107.GI14062@sarepta.ru>
References: <Pine.LNX.4.58L.0410121034270.9862@relay.sampsonievskiy.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <Pine.LNX.4.58L.0410121034270.9862@relay.sampsonievskiy.ru>
User-Agent: Mutt/1.4.2.1i
X-Virus-Scanned: by amavisd-new at localhost
X-BeenThere: community@altlinux.ru
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: community@altlinux.ru
List-Id: Mailing list for ALT Linux users <community.altlinux.ru>
List-Unsubscribe: <https://lists.altlinux.ru/mailman/listinfo/community>,
	<mailto:community-request@altlinux.ru?subject=unsubscribe>
List-Archive: <http://lists.altlinux.ru/pipermail/community>
List-Post: <mailto:community@altlinux.ru>
List-Help: <mailto:community-request@altlinux.ru?subject=help>
List-Subscribe: <https://lists.altlinux.ru/mailman/listinfo/community>,
	<mailto:community-request@altlinux.ru?subject=subscribe>
X-List-Received-Date: Tue, 12 Oct 2004 07:21:17 -0000
Archived-At: <http://lore.altlinux.org/community/20041012072107.GI14062@sarepta.ru/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

On 12 Oct, 10:40, Dmitriy Gnidchenko wrote:
> 
> Доброе время суток!!!
> 
> Последнюю неделю участились случаи атак на демон ssh
> 
> у меня по всем серверам в логах
> Oct 11 14:45:59 relay sshd[24153]: Could not reverse map address 220.80.108.78.
> ...
> Oct 11 14:46:15 relay sshd[24163]: User mysql not allowed because shell /dev/null is not executable
> ...
> Oct 11 14:46:18 relay sshd[24165]: User operator not allowed because shell /dev/null is not executable
> и тд.
> 
> IP разные попадаются, но массовость настараживает.
> 

http://lists.altlinux.ru/pipermail/devel/2004-October/014401.html ?