[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

Re: [TEKNIK] Hvad sker der her?



Jesper Hess Nielsen wrote:
> Apr  3 13:49:45 ns identd[16315]: Connection from ns.xx.dk
> Apr  3 13:49:45 ns identd[16315]: from: 1.2.3.4 ( ns.xx.dk ) for: 3373, 21

Har laves et ident lookup på den der connecter (via FTP).

> Apr  3 13:49:45 ns proftpd[16314]: ns.graffen.dk (ns.xx.dk[xxx.xxx.xx.xx]) -
> FTP session closed.

Her bliver FTP sessionen lukket

> Apr  3 13:49:46 ns telnetd[16332]: ttloop:  peer died: Invalid or incomplete
> multibyte or wide character

Telnet session bliver lukket.

> Apr  3 13:49:46 ns sshd2[23516]: connection from "1.2.3.4"
> Apr  3 13:49:46 ns sshd2[16349]: Remote host disconnected: Illegal protocol
> version.
> Apr  3 13:49:46 ns sshd2[16349]: protocol version not supported: 'Illegal
> protocol version.'

Her er en der prøver at connecte til din SSH deamon, klienten kunne godt
se ud til at være en SSH1 klient.

> Apr  3 13:49:47 ns identd[16367]: Connection from ns.xx.dk
> Apr  3 13:49:47 ns identd[16367]: from: 1.2.3.4 ( ns.xx.dk ) for: 3380, 25
> Apr  3 13:54:47 ns identd[17166]: Connection from ns.xx.dk
> Apr  3 13:54:48 ns identd[17166]: from: 1.2.3.4 ( ns.xx.dk ) for: 3397, 21

Ident forspørgelser på FTP og Telnet. (Køre du SSH på telnet porten?)

> Apr  3 13:54:48 ns proftpd[17165]: ns.xx.dk (ns.xx.dk[1.2.3.4]) - FTP
> session closed.

FTP session bliver lukket.

> Apr  3 13:54:49 ns telnetd[17183]: ttloop:  peer died: Invalid or incomplete
> multibyte or wide character

Telnet session bliver lukket.

> Apr  3 13:54:49 ns sshd2[23516]: connection from "1.2.3.4"
> Apr  3 13:54:49 ns sshd2[17200]: Remote host disconnected: Illegal protocol
> version.
> Apr  3 13:54:49 ns sshd2[17200]: protocol version not supported: 'Illegal
> protocol version.'

Se oven for.
 
Der er et eller andet der connecter til port 21, 22 og 25 hvert femte
minut, sikker på at der ikke køre et eller andet? Kunne være noget
overvågnings software (NetSaint, Big Brother eller lign.).

Og så skulle du måske overveje at køre OpenSSH/SSH1 da
licensbetingelserne for SSH2 er "lidt" grumme (Hvis du altså ikke HAR
betalt for SSH2).

-- 
Best Regards
Emil S Hansen - sslug@sslug - ESH12-RIPE
System Manager, Sophistic Systems - www.sophistic.com
BTW: I'm searching for a job.


 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2005-08-10, 21:38 CEST [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *