[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
[an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]![]() |
![]() |
![]() |
|||||||||||||||||||||||||
|
|||||||||||||||||||||||||||
![]() |
![]() |
![]() |
Hej med jer Jeg sad lige og gloede på min /var/log/messages efter en NS restart, og så opdagede jeg at der stod nogle underlige ting. Følgende gentager sig tilbage i loggen igennem et godt stykke tid : Apr 3 13:49:45 ns identd[16315]: Connection from ns.xx.dk Apr 3 13:49:45 ns identd[16315]: from: 1.2.3.4 ( ns.xx.dk ) for: 3373, 21 Apr 3 13:49:45 ns proftpd[16314]: ns.graffen.dk (ns.xx.dk[xxx.xxx.xx.xx]) - FTP session closed. Apr 3 13:49:46 ns telnetd[16332]: ttloop: peer died: Invalid or incomplete multibyte or wide character Apr 3 13:49:46 ns sshd2[23516]: connection from "1.2.3.4" Apr 3 13:49:46 ns sshd2[16349]: Remote host disconnected: Illegal protocol version. Apr 3 13:49:46 ns sshd2[16349]: protocol version not supported: 'Illegal protocol version.' Apr 3 13:49:47 ns identd[16367]: Connection from ns.xx.dk Apr 3 13:49:47 ns identd[16367]: from: 1.2.3.4 ( ns.xx.dk ) for: 3380, 25 Apr 3 13:54:47 ns identd[17166]: Connection from ns.xx.dk Apr 3 13:54:48 ns identd[17166]: from: 1.2.3.4 ( ns.xx.dk ) for: 3397, 21 Apr 3 13:54:48 ns proftpd[17165]: ns.xx.dk (ns.xx.dk[1.2.3.4]) - FTP session closed. Apr 3 13:54:49 ns telnetd[17183]: ttloop: peer died: Invalid or incomplete multibyte or wide character Apr 3 13:54:49 ns sshd2[23516]: connection from "1.2.3.4" Apr 3 13:54:49 ns sshd2[17200]: Remote host disconnected: Illegal protocol version. Apr 3 13:54:49 ns sshd2[17200]: protocol version not supported: 'Illegal protocol version.' Alle connections kommer fra ns selv og går tilsyneladende til ns... Jeg har prøvet at køre en ps -ax for at se om der var en bruger der havde installeret et eller andet underligt script, men jeg kunne ikke umiddelbart se noget. Jeg har også siddet og kigget på outputtet fra top igennem 5-10 minutter for at se om det var noget der kun kørte engang imellem. Udover det har jeg været igennem mine cron scripts - de ser ud som de skal. Er der nogen der har et forslag til hvad der kan være årsag til disse underlige connections? /Jesper
![]() |
![]() |
![]() |
||||||||||||
|
||||||||||||||
![]() | ||||||||||||||
|
||||||||||||||
![]() |
![]() |
![]() |