Veri tentitivi di login

bem80 · 14-02-2007, 11:09

Ciao ragazzi,
secondo voi questo che vuol dire?

file: auth.log
Feb 13 19:02:35 localhost sshd[11902]: Illegal user ftpuser from ::ffff:INDIRIZZOIP

secondo me che qualcuno ha provato ad accedere con l'utenze ftpuser da quell'inidirizzo IP.
Secondo voi è possibile bannare un indirizzo IP dopo X tentativi di login?
Io so che si può impostare a livello PAM (pam_access.so) un controllo su utenti/IP/Gruppi ecc, ma con utenti diversi non saprei se fosse possibile
Ad esempio, provo a loggarmi con user1,mi dà passwd errata dopo provo con user2 ecc.. ecco vorrei bloccare questo (che se non erro si chiama accesso a forza bruta)

Grazie

Ciao bella gente

ilsensine · 14-02-2007, 11:14

Quote:

Originariamente inviato da bem80

Ciao ragazzi,
secondo voi questo che vuol dire?

file: auth.log
Feb 13 19:02:35 localhost sshd[11902]: Illegal user ftpuser from ::ffff:INDIRIZZOIP

Mi sono capitati anche a me. Sono dei worm installati su zombie infetti, che scannerizzano la rete alla ricerca di computer da bucare.
In genere non sono molto intelligenti, se non hai password banali (e username prevedibili) non possono fare molto, in quanto usano coppie user/pass da liste precompilate. Assicurati inoltre di effettuare periodicamente gli aggiornamenti di sicurezza e di disabilitare il root login da ssh (meglio sarebbe consentire gli accessi ssh solo agli utenti autorizzati a farlo, e controllare che usino nomi utente e password non banali).

Per il resto delle tue domande, ci vuole qualcuno più esperto nella sicurezza.

stefanoxjx · 14-02-2007, 11:58

Di attacchi di questo tipo ne ho in continuazione, quello che vedi sotto è solo un piccolo stralcio dell'auth.log del mio server:

Codice:

Feb 13 15:54:33 server sshd[7844]: Invalid user test from 125.133.62.5
Feb 13 15:54:33 server sshd[7844]: (pam_unix) check pass; user unknown
Feb 13 15:54:33 server sshd[7844]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:54:35 server sshd[7844]: Failed password for invalid user test from 125.133.62.5 port 53507 ssh2
Feb 13 15:54:39 server sshd[7847]: Invalid user test from 125.133.62.5
Feb 13 15:54:39 server sshd[7847]: (pam_unix) check pass; user unknown
Feb 13 15:54:39 server sshd[7847]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:54:40 server sshd[7847]: Failed password for invalid user test from 125.133.62.5 port 54194 ssh2
Feb 13 15:54:44 server sshd[7863]: Invalid user test from 125.133.62.5
Feb 13 15:54:44 server sshd[7863]: (pam_unix) check pass; user unknown
Feb 13 15:54:44 server sshd[7863]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:54:45 server sshd[7863]: Failed password for invalid user test from 125.133.62.5 port 54817 ssh2
Feb 13 15:54:49 server sshd[7865]: Invalid user test from 125.133.62.5
Feb 13 15:54:49 server sshd[7865]: (pam_unix) check pass; user unknown
Feb 13 15:54:49 server sshd[7865]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:54:51 server sshd[7865]: Failed password for invalid user test from 125.133.62.5 port 55424 ssh2
Feb 13 15:54:55 server sshd[7867]: Invalid user test from 125.133.62.5
Feb 13 15:54:55 server sshd[7867]: (pam_unix) check pass; user unknown
Feb 13 15:54:55 server sshd[7867]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:54:57 server sshd[7867]: Failed password for invalid user test from 125.133.62.5 port 56117 ssh2
Feb 13 15:55:00 server sshd[7869]: Invalid user test from 125.133.62.5
Feb 13 15:55:00 server sshd[7869]: (pam_unix) check pass; user unknown
Feb 13 15:55:00 server sshd[7869]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:02 server sshd[7869]: Failed password for invalid user test from 125.133.62.5 port 56786 ssh2
Feb 13 15:55:05 server sshd[7871]: Invalid user test from 125.133.62.5
Feb 13 15:55:05 server sshd[7871]: (pam_unix) check pass; user unknown
Feb 13 15:55:05 server sshd[7871]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:08 server sshd[7871]: Failed password for invalid user test from 125.133.62.5 port 57437 ssh2
Feb 13 15:55:11 server sshd[7873]: Invalid user test from 125.133.62.5
Feb 13 15:55:11 server sshd[7873]: (pam_unix) check pass; user unknown
Feb 13 15:55:11 server sshd[7873]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:13 server sshd[7873]: Failed password for invalid user test from 125.133.62.5 port 58120 ssh2
Feb 13 15:55:16 server sshd[7877]: Invalid user test from 125.133.62.5
Feb 13 15:55:16 server sshd[7877]: (pam_unix) check pass; user unknown
Feb 13 15:55:16 server sshd[7877]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:19 server sshd[7877]: Failed password for invalid user test from 125.133.62.5 port 58775 ssh2
Feb 13 15:55:22 server sshd[7879]: Invalid user test from 125.133.62.5
Feb 13 15:55:22 server sshd[7879]: (pam_unix) check pass; user unknown
Feb 13 15:55:22 server sshd[7879]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:24 server sshd[7879]: Failed password for invalid user test from 125.133.62.5 port 59520 ssh2
Feb 13 15:55:27 server sshd[7881]: Invalid user test from 125.133.62.5
Feb 13 15:55:27 server sshd[7881]: (pam_unix) check pass; user unknown
Feb 13 15:55:27 server sshd[7881]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:30 server sshd[7881]: Failed password for invalid user test from 125.133.62.5 port 60164 ssh2
Feb 13 15:55:33 server sshd[7883]: Invalid user test from 125.133.62.5
Feb 13 15:55:33 server sshd[7883]: (pam_unix) check pass; user unknown
Feb 13 15:55:33 server sshd[7883]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:35 server sshd[7883]: Failed password for invalid user test from 125.133.62.5 port 60842 ssh2
Feb 13 15:55:38 server sshd[7885]: Invalid user test from 125.133.62.5
Feb 13 15:55:38 server sshd[7885]: (pam_unix) check pass; user unknown
Feb 13 15:55:38 server sshd[7885]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:40 server sshd[7885]: Failed password for invalid user test from 125.133.62.5 port 33219 ssh2
Feb 13 15:55:43 server sshd[7900]: Invalid user test from 125.133.62.5
Feb 13 15:55:43 server sshd[7900]: (pam_unix) check pass; user unknown
Feb 13 15:55:43 server sshd[7900]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:46 server sshd[7900]: Failed password for invalid user test from 125.133.62.5 port 33851 ssh2
Feb 13 15:55:49 server sshd[7902]: Invalid user test from 125.133.62.5
Feb 13 15:55:49 server sshd[7902]: (pam_unix) check pass; user unknown
Feb 13 15:55:49 server sshd[7902]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:51 server sshd[7902]: Failed password for invalid user test from 125.133.62.5 port 34574 ssh2
Feb 13 15:55:55 server sshd[7904]: Invalid user tester from 125.133.62.5
Feb 13 15:55:55 server sshd[7904]: (pam_unix) check pass; user unknown
Feb 13 15:55:55 server sshd[7904]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:55:57 server sshd[7904]: Failed password for invalid user tester from 125.133.62.5 port 35277 ssh2
Feb 13 15:56:01 server sshd[7906]: Invalid user tester from 125.133.62.5
Feb 13 15:56:01 server sshd[7906]: (pam_unix) check pass; user unknown
Feb 13 15:56:01 server sshd[7906]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:03 server sshd[7906]: Failed password for invalid user tester from 125.133.62.5 port 36022 ssh2
Feb 13 15:56:06 server sshd[7908]: Invalid user tester from 125.133.62.5
Feb 13 15:56:06 server sshd[7908]: (pam_unix) check pass; user unknown
Feb 13 15:56:06 server sshd[7908]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:09 server sshd[7908]: Failed password for invalid user tester from 125.133.62.5 port 36745 ssh2
Feb 13 15:56:12 server sshd[7912]: Invalid user tester from 125.133.62.5
Feb 13 15:56:12 server sshd[7912]: (pam_unix) check pass; user unknown
Feb 13 15:56:12 server sshd[7912]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:14 server sshd[7912]: Failed password for invalid user tester from 125.133.62.5 port 37439 ssh2
Feb 13 15:56:17 server sshd[7916]: Invalid user tester from 125.133.62.5
Feb 13 15:56:18 server sshd[7916]: (pam_unix) check pass; user unknown
Feb 13 15:56:18 server sshd[7916]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:20 server sshd[7916]: Failed password for invalid user tester from 125.133.62.5 port 38118 ssh2
Feb 13 15:56:23 server sshd[7918]: Invalid user tester from 125.133.62.5
Feb 13 15:56:23 server sshd[7918]: (pam_unix) check pass; user unknown
Feb 13 15:56:23 server sshd[7918]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:25 server sshd[7918]: Failed password for invalid user tester from 125.133.62.5 port 38806 ssh2
Feb 13 15:56:29 server sshd[7920]: Invalid user tester from 125.133.62.5
Feb 13 15:56:29 server sshd[7920]: (pam_unix) check pass; user unknown
Feb 13 15:56:29 server sshd[7920]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:31 server sshd[7920]: Failed password for invalid user tester from 125.133.62.5 port 39517 ssh2
Feb 13 15:56:35 server sshd[7922]: Invalid user tester from 125.133.62.5
Feb 13 15:56:35 server sshd[7922]: (pam_unix) check pass; user unknown
Feb 13 15:56:35 server sshd[7922]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:37 server sshd[7922]: Failed password for invalid user tester from 125.133.62.5 port 40260 ssh2
Feb 13 15:56:40 server sshd[7941]: Invalid user tester from 125.133.62.5
Feb 13 15:56:40 server sshd[7941]: (pam_unix) check pass; user unknown
Feb 13 15:56:40 server sshd[7941]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:43 server sshd[7941]: Failed password for invalid user tester from 125.133.62.5 port 40958 ssh2
Feb 13 15:56:46 server sshd[7943]: Invalid user tester from 125.133.62.5
Feb 13 15:56:46 server sshd[7943]: (pam_unix) check pass; user unknown
Feb 13 15:56:46 server sshd[7943]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:48 server sshd[7943]: Failed password for invalid user tester from 125.133.62.5 port 41671 ssh2
Feb 13 15:56:51 server sshd[7945]: Invalid user tester from 125.133.62.5
Feb 13 15:56:52 server sshd[7945]: (pam_unix) check pass; user unknown
Feb 13 15:56:52 server sshd[7945]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:54 server sshd[7945]: Failed password for invalid user tester from 125.133.62.5 port 42340 ssh2
Feb 13 15:56:57 server sshd[7947]: Invalid user tester from 125.133.62.5
Feb 13 15:56:57 server sshd[7947]: (pam_unix) check pass; user unknown
Feb 13 15:56:57 server sshd[7947]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:56:59 server sshd[7947]: Failed password for invalid user tester from 125.133.62.5 port 43059 ssh2
Feb 13 15:57:03 server sshd[7949]: Invalid user tester from 125.133.62.5
Feb 13 15:57:03 server sshd[7949]: (pam_unix) check pass; user unknown
Feb 13 15:57:03 server sshd[7949]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:57:05 server sshd[7949]: Failed password for invalid user tester from 125.133.62.5 port 43778 ssh2
Feb 13 15:57:08 server sshd[7951]: Invalid user tester from 125.133.62.5
Feb 13 15:57:08 server sshd[7951]: (pam_unix) check pass; user unknown
Feb 13 15:57:08 server sshd[7951]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:57:10 server sshd[7951]: Failed password for invalid user tester from 125.133.62.5 port 44435 ssh2
Feb 13 15:57:14 server sshd[7955]: Invalid user tester from 125.133.62.5
Feb 13 15:57:14 server sshd[7955]: (pam_unix) check pass; user unknown
Feb 13 15:57:14 server sshd[7955]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:57:15 server sshd[7955]: Failed password for invalid user tester from 125.133.62.5 port 45074 ssh2
Feb 13 15:57:19 server sshd[7959]: Invalid user testing from 125.133.62.5
Feb 13 15:57:19 server sshd[7959]: (pam_unix) check pass; user unknown
Feb 13 15:57:19 server sshd[7959]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:57:21 server sshd[7959]: Failed password for invalid user testing from 125.133.62.5 port 45653 ssh2
Feb 13 15:57:25 server sshd[7961]: Invalid user testing from 125.133.62.5
Feb 13 15:57:25 server sshd[7961]: (pam_unix) check pass; user unknown
Feb 13 15:57:25 server sshd[7961]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:57:27 server sshd[7961]: Failed password for invalid user testing from 125.133.62.5 port 46371 ssh2
Feb 13 15:57:30 server sshd[7963]: Invalid user testing from 125.133.62.5
Feb 13 15:57:30 server sshd[7963]: (pam_unix) check pass; user unknown
Feb 13 15:57:30 server sshd[7963]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:57:33 server sshd[7963]: Failed password for invalid user testing from 125.133.62.5 port 47064 ssh2
Feb 13 15:57:36 server sshd[7965]: Invalid user testing from 125.133.62.5
Feb 13 15:57:36 server sshd[7965]: (pam_unix) check pass; user unknown
Feb 13 15:57:36 server sshd[7965]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:57:39 server sshd[7965]: Failed password for invalid user testing from 125.133.62.5 port 47812 ssh2
Feb 13 15:57:42 server sshd[7980]: Invalid user testing from 125.133.62.5
Feb 13 15:57:42 server sshd[7980]: (pam_unix) check pass; user unknown
Feb 13 15:57:42 server sshd[7980]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:57:45 server sshd[7980]: Failed password for invalid user testing from 125.133.62.5 port 48498 ssh2
Feb 13 15:57:48 server sshd[7982]: Invalid user testing from 125.133.62.5
Feb 13 15:57:48 server sshd[7982]: (pam_unix) check pass; user unknown
Feb 13 15:57:48 server sshd[7982]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:57:51 server sshd[7982]: Failed password for invalid user testing from 125.133.62.5 port 49265 ssh2
Feb 13 15:57:54 server sshd[7984]: Invalid user testing from 125.133.62.5
Feb 13 15:57:54 server sshd[7984]: (pam_unix) check pass; user unknown
Feb 13 15:57:54 server sshd[7984]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:57:57 server sshd[7984]: Failed password for invalid user testing from 125.133.62.5 port 49978 ssh2
Feb 13 15:58:00 server sshd[7986]: Invalid user testing from 125.133.62.5
Feb 13 15:58:00 server sshd[7986]: (pam_unix) check pass; user unknown
Feb 13 15:58:00 server sshd[7986]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:03 server sshd[7986]: Failed password for invalid user testing from 125.133.62.5 port 50705 ssh2
Feb 13 15:58:06 server sshd[7988]: Invalid user testing from 125.133.62.5
Feb 13 15:58:06 server sshd[7988]: (pam_unix) check pass; user unknown
Feb 13 15:58:06 server sshd[7988]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:09 server sshd[7988]: Failed password for invalid user testing from 125.133.62.5 port 51436 ssh2
Feb 13 15:58:12 server sshd[7990]: Invalid user testing from 125.133.62.5
Feb 13 15:58:12 server sshd[7990]: (pam_unix) check pass; user unknown
Feb 13 15:58:12 server sshd[7990]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:14 server sshd[7990]: Failed password for invalid user testing from 125.133.62.5 port 52176 ssh2
Feb 13 15:58:18 server sshd[7994]: Invalid user testing from 125.133.62.5
Feb 13 15:58:18 server sshd[7994]: (pam_unix) check pass; user unknown
Feb 13 15:58:18 server sshd[7994]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:20 server sshd[7994]: Failed password for invalid user testing from 125.133.62.5 port 52867 ssh2
Feb 13 15:58:23 server sshd[7996]: Invalid user testing from 125.133.62.5
Feb 13 15:58:23 server sshd[7996]: (pam_unix) check pass; user unknown
Feb 13 15:58:23 server sshd[7996]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:25 server sshd[7996]: Failed password for invalid user testing from 125.133.62.5 port 53581 ssh2
Feb 13 15:58:29 server sshd[7998]: Invalid user testing from 125.133.62.5
Feb 13 15:58:29 server sshd[7998]: (pam_unix) check pass; user unknown
Feb 13 15:58:29 server sshd[7998]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:31 server sshd[7998]: Failed password for invalid user testing from 125.133.62.5 port 54193 ssh2
Feb 13 15:58:35 server sshd[8000]: Invalid user testing from 125.133.62.5
Feb 13 15:58:35 server sshd[8000]: (pam_unix) check pass; user unknown
Feb 13 15:58:35 server sshd[8000]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:37 server sshd[8000]: Failed password for invalid user testing from 125.133.62.5 port 54933 ssh2
Feb 13 15:58:40 server sshd[8017]: Invalid user testing from 125.133.62.5
Feb 13 15:58:40 server sshd[8017]: (pam_unix) check pass; user unknown
Feb 13 15:58:40 server sshd[8017]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:43 server sshd[8017]: Failed password for invalid user testing from 125.133.62.5 port 55623 ssh2
Feb 13 15:58:46 server sshd[8019]: Invalid user testbox from 125.133.62.5
Feb 13 15:58:46 server sshd[8019]: (pam_unix) check pass; user unknown
Feb 13 15:58:46 server sshd[8019]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:47 server sshd[8019]: Failed password for invalid user testbox from 125.133.62.5 port 56350 ssh2
Feb 13 15:58:51 server sshd[8021]: Invalid user guest from 125.133.62.5
Feb 13 15:58:51 server sshd[8021]: (pam_unix) check pass; user unknown
Feb 13 15:58:51 server sshd[8021]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:52 server sshd[8021]: Failed password for invalid user guest from 125.133.62.5 port 56971 ssh2
Feb 13 15:58:56 server sshd[8023]: Invalid user guest from 125.133.62.5
Feb 13 15:58:56 server sshd[8023]: (pam_unix) check pass; user unknown
Feb 13 15:58:56 server sshd[8023]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:58:57 server sshd[8023]: Failed password for invalid user guest from 125.133.62.5 port 57539 ssh2
Feb 13 15:59:01 server sshd[8025]: Invalid user guest from 125.133.62.5
Feb 13 15:59:01 server sshd[8025]: (pam_unix) check pass; user unknown
Feb 13 15:59:01 server sshd[8025]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:03 server sshd[8025]: Failed password for invalid user guest from 125.133.62.5 port 58145 ssh2
Feb 13 15:59:06 server sshd[8027]: Invalid user guest from 125.133.62.5
Feb 13 15:59:06 server sshd[8027]: (pam_unix) check pass; user unknown
Feb 13 15:59:06 server sshd[8027]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:09 server sshd[8027]: Failed password for invalid user guest from 125.133.62.5 port 58783 ssh2
Feb 13 15:59:12 server sshd[8031]: Invalid user guest from 125.133.62.5
Feb 13 15:59:12 server sshd[8031]: (pam_unix) check pass; user unknown
Feb 13 15:59:12 server sshd[8031]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:14 server sshd[8031]: Failed password for invalid user guest from 125.133.62.5 port 59533 ssh2
Feb 13 15:59:17 server sshd[8035]: Invalid user guest from 125.133.62.5
Feb 13 15:59:17 server sshd[8035]: (pam_unix) check pass; user unknown
Feb 13 15:59:17 server sshd[8035]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:19 server sshd[8035]: Failed password for invalid user guest from 125.133.62.5 port 60159 ssh2
Feb 13 15:59:23 server sshd[8037]: Invalid user guest from 125.133.62.5
Feb 13 15:59:23 server sshd[8037]: (pam_unix) check pass; user unknown
Feb 13 15:59:23 server sshd[8037]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:25 server sshd[8037]: Failed password for invalid user guest from 125.133.62.5 port 60834 ssh2
Feb 13 15:59:28 server sshd[8039]: Invalid user guest from 125.133.62.5
Feb 13 15:59:28 server sshd[8039]: (pam_unix) check pass; user unknown
Feb 13 15:59:28 server sshd[8039]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:30 server sshd[8039]: Failed password for invalid user guest from 125.133.62.5 port 36918 ssh2
Feb 13 15:59:34 server sshd[8041]: Invalid user guest from 125.133.62.5
Feb 13 15:59:34 server sshd[8041]: (pam_unix) check pass; user unknown
Feb 13 15:59:34 server sshd[8041]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:36 server sshd[8041]: Failed password for invalid user guest from 125.133.62.5 port 37556 ssh2
Feb 13 15:59:39 server sshd[8043]: Invalid user guest from 125.133.62.5
Feb 13 15:59:39 server sshd[8043]: (pam_unix) check pass; user unknown
Feb 13 15:59:39 server sshd[8043]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:41 server sshd[8043]: Failed password for invalid user guest from 125.133.62.5 port 38209 ssh2
Feb 13 15:59:45 server sshd[8060]: Invalid user guest from 125.133.62.5
Feb 13 15:59:45 server sshd[8060]: (pam_unix) check pass; user unknown
Feb 13 15:59:45 server sshd[8060]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:46 server sshd[8060]: Failed password for invalid user guest from 125.133.62.5 port 38858 ssh2
Feb 13 15:59:49 server sshd[8062]: Invalid user guest from 125.133.62.5
Feb 13 15:59:49 server sshd[8062]: (pam_unix) check pass; user unknown
Feb 13 15:59:49 server sshd[8062]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:52 server sshd[8062]: Failed password for invalid user guest from 125.133.62.5 port 39453 ssh2
Feb 13 15:59:55 server sshd[8064]: Invalid user guest from 125.133.62.5
Feb 13 15:59:55 server sshd[8064]: (pam_unix) check pass; user unknown
Feb 13 15:59:55 server sshd[8064]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 15:59:57 server sshd[8064]: Failed password for invalid user guest from 125.133.62.5 port 40138 ssh2
Feb 13 16:00:00 server sshd[8066]: Invalid user guest from 125.133.62.5
Feb 13 16:00:00 server sshd[8066]: (pam_unix) check pass; user unknown
Feb 13 16:00:00 server sshd[8066]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:02 server sshd[8066]: Failed password for invalid user guest from 125.133.62.5 port 40798 ssh2
Feb 13 16:00:06 server sshd[8068]: Invalid user account from 125.133.62.5
Feb 13 16:00:07 server sshd[8068]: (pam_unix) check pass; user unknown
Feb 13 16:00:07 server sshd[8068]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:09 server sshd[8068]: Failed password for invalid user account from 125.133.62.5 port 41449 ssh2
Feb 13 16:00:12 server sshd[8070]: Invalid user account from 125.133.62.5
Feb 13 16:00:12 server sshd[8070]: (pam_unix) check pass; user unknown
Feb 13 16:00:12 server sshd[8070]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:14 server sshd[8070]: Failed password for invalid user account from 125.133.62.5 port 42208 ssh2
Feb 13 16:00:18 server sshd[8074]: Invalid user admissions from 125.133.62.5
Feb 13 16:00:18 server sshd[8074]: (pam_unix) check pass; user unknown
Feb 13 16:00:18 server sshd[8074]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:20 server sshd[8074]: Failed password for invalid user admissions from 125.133.62.5 port 42878 ssh2
Feb 13 16:00:23 server sshd[8076]: Invalid user admissions from 125.133.62.5
Feb 13 16:00:23 server sshd[8076]: (pam_unix) check pass; user unknown
Feb 13 16:00:23 server sshd[8076]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:25 server sshd[8076]: Failed password for invalid user admissions from 125.133.62.5 port 43517 ssh2
Feb 13 16:00:28 server sshd[8078]: Invalid user adm from 125.133.62.5
Feb 13 16:00:28 server sshd[8078]: (pam_unix) check pass; user unknown
Feb 13 16:00:28 server sshd[8078]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:30 server sshd[8078]: Failed password for invalid user adm from 125.133.62.5 port 44130 ssh2
Feb 13 16:00:33 server sshd[8080]: Invalid user adm from 125.133.62.5
Feb 13 16:00:33 server sshd[8080]: (pam_unix) check pass; user unknown
Feb 13 16:00:33 server sshd[8080]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:35 server sshd[8080]: Failed password for invalid user adm from 125.133.62.5 port 44773 ssh2
Feb 13 16:00:38 server sshd[8082]: Invalid user adm from 125.133.62.5
Feb 13 16:00:38 server sshd[8082]: (pam_unix) check pass; user unknown
Feb 13 16:00:38 server sshd[8082]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:40 server sshd[8082]: Failed password for invalid user adm from 125.133.62.5 port 45393 ssh2
Feb 13 16:00:44 server sshd[8097]: Invalid user adm from 125.133.62.5
Feb 13 16:00:44 server sshd[8097]: (pam_unix) check pass; user unknown
Feb 13 16:00:44 server sshd[8097]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:45 server sshd[8097]: Failed password for invalid user adm from 125.133.62.5 port 46066 ssh2
Feb 13 16:00:48 server sshd[8099]: Invalid user adm from 125.133.62.5
Feb 13 16:00:48 server sshd[8099]: (pam_unix) check pass; user unknown
Feb 13 16:00:48 server sshd[8099]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:50 server sshd[8099]: Failed password for invalid user adm from 125.133.62.5 port 46649 ssh2
Feb 13 16:00:54 server sshd[8101]: Invalid user adm from 125.133.62.5
Feb 13 16:00:54 server sshd[8101]: (pam_unix) check pass; user unknown
Feb 13 16:00:54 server sshd[8101]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:00:56 server sshd[8101]: Failed password for invalid user adm from 125.133.62.5 port 47284 ssh2
Feb 13 16:00:59 server sshd[8103]: Invalid user admin from 125.133.62.5
Feb 13 16:00:59 server sshd[8103]: (pam_unix) check pass; user unknown
Feb 13 16:00:59 server sshd[8103]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:01 server sshd[8103]: Failed password for invalid user admin from 125.133.62.5 port 47937 ssh2
Feb 13 16:01:05 server sshd[8105]: Invalid user admin from 125.133.62.5
Feb 13 16:01:05 server sshd[8105]: (pam_unix) check pass; user unknown
Feb 13 16:01:05 server sshd[8105]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:07 server sshd[8105]: Failed password for invalid user admin from 125.133.62.5 port 48627 ssh2
Feb 13 16:01:10 server sshd[8107]: Invalid user admin from 125.133.62.5
Feb 13 16:01:10 server sshd[8107]: (pam_unix) check pass; user unknown
Feb 13 16:01:10 server sshd[8107]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:12 server sshd[8107]: Failed password for invalid user admin from 125.133.62.5 port 49244 ssh2
Feb 13 16:01:15 server sshd[8111]: Invalid user admin from 125.133.62.5
Feb 13 16:01:15 server sshd[8111]: (pam_unix) check pass; user unknown
Feb 13 16:01:15 server sshd[8111]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:17 server sshd[8111]: Failed password for invalid user admin from 125.133.62.5 port 49883 ssh2
Feb 13 16:01:20 server sshd[8115]: Invalid user admin from 125.133.62.5
Feb 13 16:01:20 server sshd[8115]: (pam_unix) check pass; user unknown
Feb 13 16:01:20 server sshd[8115]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:22 server sshd[8115]: Failed password for invalid user admin from 125.133.62.5 port 50498 ssh2
Feb 13 16:01:26 server sshd[8117]: Invalid user admin from 125.133.62.5
Feb 13 16:01:26 server sshd[8117]: (pam_unix) check pass; user unknown
Feb 13 16:01:26 server sshd[8117]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:27 server sshd[8117]: Failed password for invalid user admin from 125.133.62.5 port 51122 ssh2
Feb 13 16:01:31 server sshd[8119]: Invalid user admin from 125.133.62.5
Feb 13 16:01:31 server sshd[8119]: (pam_unix) check pass; user unknown
Feb 13 16:01:31 server sshd[8119]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:33 server sshd[8119]: Failed password for invalid user admin from 125.133.62.5 port 51706 ssh2
Feb 13 16:01:36 server sshd[8121]: Invalid user admin from 125.133.62.5
Feb 13 16:01:36 server sshd[8121]: (pam_unix) check pass; user unknown
Feb 13 16:01:36 server sshd[8121]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:38 server sshd[8121]: Failed password for invalid user admin from 125.133.62.5 port 52406 ssh2
Feb 13 16:01:42 server sshd[8140]: Invalid user admin from 125.133.62.5
Feb 13 16:01:42 server sshd[8140]: (pam_unix) check pass; user unknown
Feb 13 16:01:42 server sshd[8140]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:44 server sshd[8140]: Failed password for invalid user admin from 125.133.62.5 port 53053 ssh2
Feb 13 16:01:47 server sshd[8142]: Invalid user admin from 125.133.62.5
Feb 13 16:01:47 server sshd[8142]: (pam_unix) check pass; user unknown
Feb 13 16:01:47 server sshd[8142]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:49 server sshd[8142]: Failed password for invalid user admin from 125.133.62.5 port 53749 ssh2
Feb 13 16:01:52 server sshd[8144]: Invalid user admin from 125.133.62.5
Feb 13 16:01:52 server sshd[8144]: (pam_unix) check pass; user unknown
Feb 13 16:01:52 server sshd[8144]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:01:55 server sshd[8144]: Failed password for invalid user admin from 125.133.62.5 port 54388 ssh2
Feb 13 16:01:58 server sshd[8146]: Invalid user admin from 125.133.62.5
Feb 13 16:01:58 server sshd[8146]: (pam_unix) check pass; user unknown
Feb 13 16:01:58 server sshd[8146]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:00 server sshd[8146]: Failed password for invalid user admin from 125.133.62.5 port 55108 ssh2
Feb 13 16:02:04 server sshd[8148]: Invalid user admin from 125.133.62.5
Feb 13 16:02:04 server sshd[8148]: (pam_unix) check pass; user unknown
Feb 13 16:02:04 server sshd[8148]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:06 server sshd[8148]: Failed password for invalid user admin from 125.133.62.5 port 55805 ssh2
Feb 13 16:02:09 server sshd[8150]: Invalid user admin from 125.133.62.5
Feb 13 16:02:09 server sshd[8150]: (pam_unix) check pass; user unknown
Feb 13 16:02:09 server sshd[8150]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:11 server sshd[8150]: Failed password for invalid user admin from 125.133.62.5 port 56449 ssh2
Feb 13 16:02:15 server sshd[8154]: Invalid user admin from 125.133.62.5
Feb 13 16:02:15 server sshd[8154]: (pam_unix) check pass; user unknown
Feb 13 16:02:15 server sshd[8154]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:17 server sshd[8154]: Failed password for invalid user admin from 125.133.62.5 port 57075 ssh2
Feb 13 16:02:20 server sshd[8158]: Invalid user admin from 125.133.62.5
Feb 13 16:02:20 server sshd[8158]: (pam_unix) check pass; user unknown
Feb 13 16:02:20 server sshd[8158]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:22 server sshd[8158]: Failed password for invalid user admin from 125.133.62.5 port 57764 ssh2
Feb 13 16:02:25 server sshd[8160]: Invalid user administrator from 125.133.62.5
Feb 13 16:02:25 server sshd[8160]: (pam_unix) check pass; user unknown
Feb 13 16:02:25 server sshd[8160]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:28 server sshd[8160]: Failed password for invalid user administrator from 125.133.62.5 port 58369 ssh2
Feb 13 16:02:31 server sshd[8162]: Invalid user administrator from 125.133.62.5
Feb 13 16:02:31 server sshd[8162]: (pam_unix) check pass; user unknown
Feb 13 16:02:31 server sshd[8162]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:33 server sshd[8162]: Failed password for invalid user administrator from 125.133.62.5 port 59059 ssh2
Feb 13 16:02:37 server sshd[8164]: Invalid user administrator from 125.133.62.5
Feb 13 16:02:37 server sshd[8164]: (pam_unix) check pass; user unknown
Feb 13 16:02:37 server sshd[8164]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:39 server sshd[8164]: Failed password for invalid user administrator from 125.133.62.5 port 59765 ssh2
Feb 13 16:02:43 server sshd[8179]: Invalid user administrator from 125.133.62.5
Feb 13 16:02:43 server sshd[8179]: (pam_unix) check pass; user unknown
Feb 13 16:02:43 server sshd[8179]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:45 server sshd[8179]: Failed password for invalid user administrator from 125.133.62.5 port 60456 ssh2
Feb 13 16:02:48 server sshd[8181]: Invalid user administrator from 125.133.62.5
Feb 13 16:02:48 server sshd[8181]: (pam_unix) check pass; user unknown
Feb 13 16:02:48 server sshd[8181]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:51 server sshd[8181]: Failed password for invalid user administrator from 125.133.62.5 port 32964 ssh2
Feb 13 16:02:54 server sshd[8183]: Invalid user alias from 125.133.62.5
Feb 13 16:02:54 server sshd[8183]: (pam_unix) check pass; user unknown
Feb 13 16:02:54 server sshd[8183]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:02:56 server sshd[8183]: Failed password for invalid user alias from 125.133.62.5 port 33635 ssh2
Feb 13 16:02:59 server sshd[8185]: Invalid user alias from 125.133.62.5
Feb 13 16:02:59 server sshd[8185]: (pam_unix) check pass; user unknown
Feb 13 16:02:59 server sshd[8185]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:03:01 server sshd[8185]: Failed password for invalid user alias from 125.133.62.5 port 34317 ssh2
Feb 13 16:03:05 server sshd[8187]: Invalid user alumni from 125.133.62.5
Feb 13 16:03:05 server sshd[8187]: (pam_unix) check pass; user unknown
Feb 13 16:03:05 server sshd[8187]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:03:07 server sshd[8187]: Failed password for invalid user alumni from 125.133.62.5 port 34964 ssh2
Feb 13 16:03:10 server sshd[8189]: Invalid user alumni from 125.133.62.5
Feb 13 16:03:10 server sshd[8189]: (pam_unix) check pass; user unknown
Feb 13 16:03:10 server sshd[8189]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:03:13 server sshd[8189]: Failed password for invalid user alumni from 125.133.62.5 port 35643 ssh2
Feb 13 16:03:16 server sshd[8191]: Invalid user apache from 125.133.62.5
Feb 13 16:03:16 server sshd[8191]: (pam_unix) check pass; user unknown
Feb 13 16:03:16 server sshd[8191]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:03:19 server sshd[8191]: Failed password for invalid user apache from 125.133.62.5 port 36342 ssh2
Feb 13 16:03:22 server sshd[8195]: Invalid user apache from 125.133.62.5
Feb 13 16:03:22 server sshd[8195]: (pam_unix) check pass; user unknown
Feb 13 16:03:22 server sshd[8195]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:03:25 server sshd[8195]: Failed password for invalid user apache from 125.133.62.5 port 37116 ssh2
Feb 13 16:03:28 server sshd[8197]: Invalid user apache from 125.133.62.5
Feb 13 16:03:28 server sshd[8197]: (pam_unix) check pass; user unknown
Feb 13 16:03:28 server sshd[8197]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:03:31 server sshd[8197]: Failed password for invalid user apache from 125.133.62.5 port 37853 ssh2
Feb 13 16:03:34 server sshd[8199]: Invalid user apache2 from 125.133.62.5
Feb 13 16:03:34 server sshd[8199]: (pam_unix) check pass; user unknown
Feb 13 16:03:34 server sshd[8199]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:03:37 server sshd[8199]: Failed password for invalid user apache2 from 125.133.62.5 port 38591 ssh2
Feb 13 16:03:40 server sshd[8201]: Invalid user apache2 from 125.133.62.5
Feb 13 16:03:40 server sshd[8201]: (pam_unix) check pass; user unknown
Feb 13 16:03:40 server sshd[8201]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:03:43 server sshd[8201]: Failed password for invalid user apache2 from 125.133.62.5 port 39313 ssh2
Feb 13 16:03:46 server sshd[8216]: Invalid user apache2 from 125.133.62.5
Feb 13 16:03:46 server sshd[8216]: (pam_unix) check pass; user unknown
Feb 13 16:03:46 server sshd[8216]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:03:48 server sshd[8216]: Failed password for invalid user apache2 from 125.133.62.5 port 40071 ssh2
Feb 13 16:03:52 server sshd[8218]: Invalid user apache2 from 125.133.62.5
Feb 13 16:03:52 server sshd[8218]: (pam_unix) check pass; user unknown
Feb 13 16:03:52 server sshd[8218]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:03:54 server sshd[8218]: Failed password for invalid user apache2 from 125.133.62.5 port 40786 ssh2
Feb 13 16:03:58 server sshd[8220]: User backup from 125.133.62.5 not allowed because not listed in AllowUsers
Feb 13 16:03:58 server sshd[8220]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5  user=backup
Feb 13 16:04:00 server sshd[8220]: Failed password for invalid user backup from 125.133.62.5 port 41495 ssh2
Feb 13 16:04:04 server sshd[8222]: User backup from 125.133.62.5 not allowed because not listed in AllowUsers
Feb 13 16:04:04 server sshd[8222]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5  user=backup
Feb 13 16:04:06 server sshd[8222]: Failed password for invalid user backup from 125.133.62.5 port 42248 ssh2
Feb 13 16:04:09 server sshd[8224]: User bin from 125.133.62.5 not allowed because not listed in AllowUsers
Feb 13 16:04:09 server sshd[8224]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5  user=bin
Feb 13 16:04:11 server sshd[8224]: Failed password for invalid user bin from 125.133.62.5 port 42907 ssh2
Feb 13 16:04:15 server sshd[8226]: User bin from 125.133.62.5 not allowed because not listed in AllowUsers
Feb 13 16:04:15 server sshd[8226]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5  user=bin
Feb 13 16:04:17 server sshd[8226]: Failed password for invalid user bin from 125.133.62.5 port 43612 ssh2
Feb 13 16:04:20 server sshd[8230]: Invalid user bind from 125.133.62.5
Feb 13 16:04:20 server sshd[8230]: (pam_unix) check pass; user unknown
Feb 13 16:04:20 server sshd[8230]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:04:22 server sshd[8230]: Failed password for invalid user bind from 125.133.62.5 port 44288 ssh2
Feb 13 16:04:26 server sshd[8232]: Invalid user bind from 125.133.62.5
Feb 13 16:04:26 server sshd[8232]: (pam_unix) check pass; user unknown
Feb 13 16:04:26 server sshd[8232]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:04:28 server sshd[8232]: Failed password for invalid user bind from 125.133.62.5 port 44965 ssh2
Feb 13 16:04:31 server sshd[8234]: Invalid user build from 125.133.62.5
Feb 13 16:04:31 server sshd[8234]: (pam_unix) check pass; user unknown
Feb 13 16:04:31 server sshd[8234]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:04:33 server sshd[8234]: Failed password for invalid user build from 125.133.62.5 port 50100 ssh2
Feb 13 16:04:37 server sshd[8236]: Invalid user build from 125.133.62.5
Feb 13 16:04:37 server sshd[8236]: (pam_unix) check pass; user unknown
Feb 13 16:04:37 server sshd[8236]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:04:39 server sshd[8236]: Failed password for invalid user build from 125.133.62.5 port 50811 ssh2
Feb 13 16:04:42 server sshd[8253]: Invalid user canna from 125.133.62.5
Feb 13 16:04:42 server sshd[8253]: (pam_unix) check pass; user unknown
Feb 13 16:04:42 server sshd[8253]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:04:44 server sshd[8253]: Failed password for invalid user canna from 125.133.62.5 port 51452 ssh2
Feb 13 16:04:47 server sshd[8255]: Invalid user canna from 125.133.62.5
Feb 13 16:04:47 server sshd[8255]: (pam_unix) check pass; user unknown
Feb 13 16:04:47 server sshd[8255]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:04:49 server sshd[8255]: Failed password for invalid user canna from 125.133.62.5 port 52032 ssh2
Feb 13 16:04:52 server sshd[8257]: Invalid user clamav from 125.133.62.5
Feb 13 16:04:52 server sshd[8257]: (pam_unix) check pass; user unknown
Feb 13 16:04:52 server sshd[8257]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:04:54 server sshd[8257]: Failed password for invalid user clamav from 125.133.62.5 port 52679 ssh2
Feb 13 16:04:58 server sshd[8259]: Invalid user clamav from 125.133.62.5
Feb 13 16:04:58 server sshd[8259]: (pam_unix) check pass; user unknown
Feb 13 16:04:58 server sshd[8259]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:00 server sshd[8259]: Failed password for invalid user clamav from 125.133.62.5 port 53351 ssh2
Feb 13 16:05:03 server sshd[8261]: Invalid user class from 125.133.62.5
Feb 13 16:05:03 server sshd[8261]: (pam_unix) check pass; user unknown
Feb 13 16:05:03 server sshd[8261]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:05 server sshd[8261]: Failed password for invalid user class from 125.133.62.5 port 54066 ssh2
Feb 13 16:05:09 server sshd[8263]: Invalid user class from 125.133.62.5
Feb 13 16:05:09 server sshd[8263]: (pam_unix) check pass; user unknown
Feb 13 16:05:09 server sshd[8263]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:11 server sshd[8263]: Failed password for invalid user class from 125.133.62.5 port 54698 ssh2
Feb 13 16:05:14 server sshd[8265]: Invalid user class2004 from 125.133.62.5
Feb 13 16:05:14 server sshd[8265]: (pam_unix) check pass; user unknown
Feb 13 16:05:14 server sshd[8265]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:16 server sshd[8265]: Failed password for invalid user class2004 from 125.133.62.5 port 55430 ssh2
Feb 13 16:05:19 server sshd[8269]: Invalid user class2005 from 125.133.62.5
Feb 13 16:05:19 server sshd[8269]: (pam_unix) check pass; user unknown
Feb 13 16:05:19 server sshd[8269]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:22 server sshd[8269]: Failed password for invalid user class2005 from 125.133.62.5 port 56052 ssh2
Feb 13 16:05:25 server sshd[8271]: Invalid user cpanel from 125.133.62.5
Feb 13 16:05:25 server sshd[8271]: (pam_unix) check pass; user unknown
Feb 13 16:05:25 server sshd[8271]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:27 server sshd[8271]: Failed password for invalid user cpanel from 125.133.62.5 port 56800 ssh2
Feb 13 16:05:31 server sshd[8273]: Invalid user cpanel from 125.133.62.5
Feb 13 16:05:31 server sshd[8273]: (pam_unix) check pass; user unknown
Feb 13 16:05:31 server sshd[8273]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:33 server sshd[8273]: Failed password for invalid user cpanel from 125.133.62.5 port 57424 ssh2
Feb 13 16:05:36 server sshd[8275]: Invalid user cvs from 125.133.62.5
Feb 13 16:05:36 server sshd[8275]: (pam_unix) check pass; user unknown
Feb 13 16:05:36 server sshd[8275]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:38 server sshd[8275]: Failed password for invalid user cvs from 125.133.62.5 port 58178 ssh2
Feb 13 16:05:41 server sshd[8290]: Invalid user cvs from 125.133.62.5
Feb 13 16:05:41 server sshd[8290]: (pam_unix) check pass; user unknown
Feb 13 16:05:41 server sshd[8290]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:43 server sshd[8290]: Failed password for invalid user cvs from 125.133.62.5 port 58786 ssh2
Feb 13 16:05:47 server sshd[8292]: Invalid user cvsuser from 125.133.62.5
Feb 13 16:05:47 server sshd[8292]: (pam_unix) check pass; user unknown
Feb 13 16:05:47 server sshd[8292]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:48 server sshd[8292]: Failed password for invalid user cvsuser from 125.133.62.5 port 59438 ssh2
Feb 13 16:05:52 server sshd[8294]: Invalid user cvsuser from 125.133.62.5
Feb 13 16:05:52 server sshd[8294]: (pam_unix) check pass; user unknown
Feb 13 16:05:52 server sshd[8294]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5
Feb 13 16:05:54 server sshd[8294]: Failed password for invalid user cvsuser from 125.133.62.5 port 60072 ssh2
Feb 13 16:05:57 server sshd[8296]: User daemon from 125.133.62.5 not allowed because not listed in AllowUsers
Feb 13 16:05:57 server sshd[8296]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5  user=daemon
Feb 13 16:05:59 server sshd[8296]: Failed password for invalid user daemon from 125.133.62.5 port 60695 ssh2
Feb 13 16:06:02 server sshd[8298]: User daemon from 125.133.62.5 not allowed because not listed in AllowUsers
Feb 13 16:06:02 server sshd[8298]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.62.5  user=daemon
Feb 13 16:06:04 server sshd[8298]: Failed password for invalid user daemon from 125.133.62.5 port 33087 ssh2

La tua stessa domanda l'avevo posta anch'io tempo fa ed avevo fatto anche alcune ricerche, però non ho trovato nulla in merito.

bem80 · 14-02-2007, 12:12

Quote:

Originariamente inviato da ilsensine

Mi sono capitati anche a me. Sono dei worm installati su zombie infetti, che scannerizzano la rete alla ricerca di computer da bucare.
In genere non sono molto intelligenti, se non hai password banali (e username prevedibili) non possono fare molto, in quanto usano coppie user/pass da liste precompilate. Assicurati inoltre di effettuare periodicamente gli aggiornamenti di sicurezza e di disabilitare il root login da ssh (meglio sarebbe consentire gli accessi ssh solo agli utenti autorizzati a farlo, e controllare che usino nomi utente e password non banali).

Per il resto delle tue domande, ci vuole qualcuno più esperto nella sicurezza.

si, già disabilitato il login root da SSH e anche configurato il file /etc/security/access.conf con qualche criterio sulla security.
Sicuramente è interessante la tua risposta sul worm, anche se mi viene da pensare che basta modificare la porta 22 e si risolverebbe il problema.

Nel frattempo aspettiamo qualcuno che ha qualche idea sul mio quesito

Grazie mille ilsensine

ilsensine · 14-02-2007, 12:16

Quote:

Originariamente inviato da bem80

anche se mi viene da pensare che basta modificare la porta 22 e si risolverebbe il problema.

Potrebbe aiutare, questo worm sembra veramente stupido. Non credo che scannerizzi tutte le porte tcp del sistema.

Anzi, visto che i computer infetti sono probabilmente macchine unix con ssh, metti una bella regola di iptables sulla 22 con -j MIRROR

vampirodolce1 · 14-02-2007, 12:46

Quote:

Originariamente inviato da ilsensine

visto che i computer infetti sono probabilmente macchine unix con ssh, metti una bella regola di iptables sulla 22 con -j MIRROR

Ciao, da quello che ho capito Mirror inverte origine e destinazione dei pacchetti, sto leggendo nell'iptables tutorial, dice che -j MIRROR "works under Linux kernel 2.3 and 2.4. It was removed from 2.5 and 2.6 kernels due to its inherent insecurity. Do not use this target".
Ti risulta che sia ancora possibile usare questo obiettivo con kernel 2.6?

ilsensine · 14-02-2007, 12:52

Quote:

Originariamente inviato da vampirodolce1

Ciao, da quello che ho capito Mirror inverte origine e destinazione dei pacchetti, sto leggendo nell'iptables tutorial, dice che -j MIRROR "works under Linux kernel 2.3 and 2.4. It was removed from 2.5 and 2.6 kernels due to its inherent insecurity. Do not use this target".
Ti risulta che sia ancora possibile usare questo obiettivo con kernel 2.6?

Doh hai ragione, non sapevo fosse stato rimosso.

bem80 · 14-02-2007, 13:45

Quote:

Originariamente inviato da ilsensine

Potrebbe aiutare, questo worm sembra veramente stupido. Non credo che scannerizzi tutte le porte tcp del sistema.

anche secondo me, punta solo alla 22.

Quote:

Originariamente inviato da ilsensine

Anzi, visto che i computer infetti sono probabilmente macchine unix con ssh...

come mai pensi che siano macchine unix?

uovobw · 14-02-2007, 14:18

il mio consiglio e' di installare denyhost.
Ti permette di bannare automaticamente un indirizzo ip mettendolo in hosts.deny dopo X configurabili tentativi di accesso errati con password sbagliata, utente inesistente o simile.
Mettere ssh su una porta diversa, come facevo io prima di conoscere questo pacchetto, non aiuta troppo. Port knocking e' figo ma ti obbliga ad avere il demone sempre sulle macchine da cui ti vuoi connettere e a ricordarti troppe cose...

W.S. · 14-02-2007, 14:41

pure io ne ho in continuazione, praticamente su ogni server pubblico (di media 2-3000 connessioni a notte per macchina). Come già detto è un problema irrisorio, basta non avere password ovvie (test/test o robe simili)
Cambiare porta risolve questo problema (il worm è talmente "stupido" che non fa una scansione delle porte) ma non sempre è possibile farlo.
Penso che se si vuole arginare questo problema (personalmente non ho preso alcuna precauzione se non un monitoring leggermente + attento) la soluzione migliore (quantomeno io farei così) sarebbe una "bad list", tipo uno script che se trova troppi tentativi del genere dallo stesso ip lo blocca via firewall.

EDIT: in effetti, rileggendo, è la stessa cosa che ha consigliato uovobw con denyhost

bem80 · 14-02-2007, 15:33

Quote:

Originariamente inviato da uovobw

il mio consiglio e' di installare denyhost.
Ti permette di bannare automaticamente un indirizzo ip mettendolo in hosts.deny dopo X configurabili tentativi di accesso errati con password sbagliata, utente inesistente o simile.

interessante vedrò tale demone questa sera, dato che sicuramente si potrà configurare il tempo di BAN, il numero di connessioni ecc.
grazie uovobw per l'info

dennyv · 14-02-2007, 18:10

Quote:

Originariamente inviato da bem80

anche secondo me, punta solo alla 22.

Confermo, puntano solo alla 22. Da quando all'esterno ho il NAT della 22 su una porta non standard (ovviamente di quelle "libere") non ho più avuto un tentativo di accesso da parte dei bot.

Se gli utenti che si connettono via ssh sono sempre quelli e pochi (o solo tu), consiglio di bloccare tutti gli utenti esclusi loro da configurazione.
Inoltre riduci il numero di tentativi prima della disconnessione forzata al minimo possibile.

Il mirror è stato sì rimosso... in effetti era un po' poco ortodosso

vizzz · 14-02-2007, 18:42

una soluzione elegante un poco più semplice del port knocking, è quella di creare due script cgi..uno che permette l'accesso alla porta 22 dell'ip che lo ha invocato e uno che nega l'accesso.
il tutto ovviamente con la 22 drop di default.
così uno apre la pagina http://sito/cgi-bin/openssh, entra e fa i suoi comodi
e quando esce http://sito/cgi-bin/closessh.
fattibile anche con php.

bem80 · 14-02-2007, 22:10

vero dennyv se natti hai risolto il problema, che forse è la cosa più carina e semplice.
vizzz onestamente non ho capito la tua soluzione, devi craere due script CGI, e accedi con http (quindi per la 80?) ... mi sono perso

vizzz · 14-02-2007, 22:19

Quote:

Originariamente inviato da bem80

vero dennyv se natti hai risolto il problema, che forse è la cosa più carina e semplice.
vizzz onestamente non ho capito la tua soluzione, devi craere due script CGI, e accedi con http (quindi per la 80?) ... mi sono perso

scusa ho scritto un po di fretta.
si accedi con http a quello script e ti apri la porta, con l'altro la richiudi

bem80 · 14-02-2007, 22:26

Quote:

Originariamente inviato da vizzz

scusa ho scritto un po di fretta.
si accedi con http a quello script e ti apri la porta, con l'altro la richiudi

troppo forte come trovata

HexDEF6 · 14-02-2007, 22:42

Quote:

Originariamente inviato da vizzz

una soluzione elegante un poco più semplice del port knocking, è quella di creare due script cgi..uno che permette l'accesso alla porta 22 dell'ip che lo ha invocato e uno che nega l'accesso.
il tutto ovviamente con la 22 drop di default.
così uno apre la pagina http://sito/cgi-bin/openssh, entra e fa i suoi comodi
e quando esce http://sito/cgi-bin/closessh.
fattibile anche con php.

questa puo' essere una soluzione se devi gia avere un server web attivo...
altrimenti mettere su un server per metterne in sicurezza un altro non mi pare una buona idea...

W.S. · 15-02-2007, 13:34

no, non mi piace per nulla come idea. Per risolvere un problema insignificante far passare la connessioine ssh tramite un servizio web con cgi??? Per di più con privilegi elevati visto che (se non sbaglio) si vuole gestire regole iptables tramite gci??
nono, non esiste

EDIT: rileggendo ho capito che non si vuole far passare la connessione ma solo abilitare/chiudere le porte, rimane comunque una "sporca" inutile (a mio avviso)

RaouL_BennetH · 15-02-2007, 13:56

ne avevo una marea anche io di tentativi di connessione del genere, poi, ho cambiato la porta dalla 22 alla 3796 (cambio numero di porta ogni settimana) e i tentativi sono scomparsi.

14-02-2007, 11:09	#1
bem80 Member Iscritto dal: Oct 2006 Messaggi: 109	Veri tentitivi di login Ciao ragazzi, secondo voi questo che vuol dire? file: auth.log Feb 13 19:02:35 localhost sshd[11902]: Illegal user ftpuser from ::ffff:INDIRIZZOIP secondo me che qualcuno ha provato ad accedere con l'utenze ftpuser da quell'inidirizzo IP. Secondo voi è possibile bannare un indirizzo IP dopo X tentativi di login? Io so che si può impostare a livello PAM (pam_access.so) un controllo su utenti/IP/Gruppi ecc, ma con utenti diversi non saprei se fosse possibile Ad esempio, provo a loggarmi con user1,mi dà passwd errata dopo provo con user2 ecc.. ecco vorrei bloccare questo (che se non erro si chiama accesso a forza bruta) Grazie Ciao bella gente __________________ bem@bemdeb:~$ uname -a Linux bemprt 2.6.32-5-686 #1 SMP Tue Jun 1 04:59:47 UTC 2010 i686 GNU/Linux

14-02-2007, 14:18	#9
uovobw Senior Member Iscritto dal: Apr 2003 Messaggi: 375	il mio consiglio e' di installare denyhost. Ti permette di bannare automaticamente un indirizzo ip mettendolo in hosts.deny dopo X configurabili tentativi di accesso errati con password sbagliata, utente inesistente o simile. Mettere ssh su una porta diversa, come facevo io prima di conoscere questo pacchetto, non aiuta troppo. Port knocking e' figo ma ti obbliga ad avere il demone sempre sulle macchine da cui ti vuoi connettere e a ricordarti troppe cose... __________________ - UoVoBW - GNU/Linux registered User # 364578 Debian Sid - kernel 2.6.23.1 - FluxBox http://uovobw.homelinux.org/

14-02-2007, 14:41	#10
W.S. Senior Member Iscritto dal: Nov 2005 Messaggi: 1868	pure io ne ho in continuazione, praticamente su ogni server pubblico (di media 2-3000 connessioni a notte per macchina). Come già detto è un problema irrisorio, basta non avere password ovvie (test/test o robe simili) Cambiare porta risolve questo problema (il worm è talmente "stupido" che non fa una scansione delle porte) ma non sempre è possibile farlo. Penso che se si vuole arginare questo problema (personalmente non ho preso alcuna precauzione se non un monitoring leggermente + attento) la soluzione migliore (quantomeno io farei così) sarebbe una "bad list", tipo uno script che se trova troppi tentativi del genere dallo stesso ip lo blocca via firewall. EDIT: in effetti, rileggendo, è la stessa cosa che ha consigliato uovobw con denyhost __________________ [ W.S. ]

14-02-2007, 22:10	#14
bem80 Member Iscritto dal: Oct 2006 Messaggi: 109	vero dennyv se natti hai risolto il problema, che forse è la cosa più carina e semplice. vizzz onestamente non ho capito la tua soluzione, devi craere due script CGI, e accedi con http (quindi per la 80?) ... mi sono perso __________________ bem@bemdeb:~$ uname -a Linux bemprt 2.6.32-5-686 #1 SMP Tue Jun 1 04:59:47 UTC 2010 i686 GNU/Linux

15-02-2007, 13:34	#18
W.S. Senior Member Iscritto dal: Nov 2005 Messaggi: 1868	no, non mi piace per nulla come idea. Per risolvere un problema insignificante far passare la connessioine ssh tramite un servizio web con cgi??? Per di più con privilegi elevati visto che (se non sbaglio) si vuole gestire regole iptables tramite gci?? nono, non esiste EDIT: rileggendo ho capito che non si vuole far passare la connessione ma solo abilitare/chiudere le porte, rimane comunque una "sporca" inutile (a mio avviso) __________________ [ W.S. ] Ultima modifica di W.S. : 15-02-2007 alle 13:38.

14-02-2007, 18:42	#13
vizzz Senior Member Iscritto dal: Mar 2006 Città: Bergamo Messaggi: 2499	una soluzione elegante un poco più semplice del port knocking, è quella di creare due script cgi..uno che permette l'accesso alla porta 22 dell'ip che lo ha invocato e uno che nega l'accesso. il tutto ovviamente con la 22 drop di default. così uno apre la pagina http://sito/cgi-bin/openssh, entra e fa i suoi comodi e quando esce http://sito/cgi-bin/closessh. fattibile anche con php.

15-02-2007, 13:56	#19
RaouL_BennetH Senior Member Iscritto dal: Sep 2004 Messaggi: 3967	ne avevo una marea anche io di tentativi di connessione del genere, poi, ho cambiato la porta dalla 22 alla 3796 (cambio numero di porta ogni settimana) e i tentativi sono scomparsi. __________________ Dai wafer di silicio nasce: LoHacker... il primo biscotto Geek

Strumenti
Mostra una versione stampabile Invia questa pagina per email