Raketenzugriffskontrolleur

[TS]

Hello,

ich vermisse da [root].

Ich nicht:

PermitRootLogin prohibit-password

Für alle anderen gilt übrigens:

PasswordAuthentication no
#…
Match Address 192.168.1.0/24
        PasswordAuthentication yes

Das hat aber nichts damit zu tun, dass im auth.log auch Einträge mif [root] auftauchen können.

Dec 29 06:43:25 bitworks-4309-1 sshd[11437]: Failed password for root from 148.204.211.136 port 57260 ssh2  
Dec 29 06:43:30 bitworks-4309-1 sshd[11439]: Failed password for root from 192.228.100.249 port 49601 ssh2
Dec 29 06:43:36 bitworks-4309-1 sshd[11441]: Failed password for invalid user DUP from 192.228.100.249 port 49886 ssh2
Dec 29 06:43:41 bitworks-4309-1 sshd[11443]: Failed password for root from 192.228.100.249 port 50132 ssh2
Dec 29 06:46:29 bitworks-4309-1 sshd[11490]: Failed password for root from 197.211.9.62 port 45660 ssh2
Dec 29 06:49:26 bitworks-4309-1 sshd[11517]: Failed password for invalid user jane from 51.255.161.25 port 57742 ssh2
Dec 29 06:51:11 bitworks-4309-1 sshd[11555]: Failed password for invalid user dmara from 190.128.158.26 port 9049 ssh2
Dec 29 06:51:50 bitworks-4309-1 sshd[11557]: Failed password for root from 136.228.161.67 port 46300 ssh2 
Dec 29 06:51:53 bitworks-4309-1 sshd[11559]: Failed password for root from 139.9.124.204 port 51644 ssh2
Dec 29 06:52:48 bitworks-4309-1 sshd[11561]: Failed password for invalid user w3master from 118.187.5.37 port 46518 ssh2
Dec 29 06:53:41 bitworks-4309-1 sshd[11566]: Failed password for invalid user filip from 177.76.215.147 port 47080 ssh2
Dec 29 06:58:33 bitworks-4309-1 sshd[11609]: Failed password for invalid user fv from 188.165.252.24 port 35562 ssh2                                                                                                Dec 29 07:02:05 bitworks-4309-1 sshd[11653]: Failed password for invalid user seniuk from 85.25.192.141 port 40974 ssh2
Dec 29 07:10:44 bitworks-4309-1 sshd[11756]: Failed password for invalid user firdau from 149.202.52.221 port 39875 ssh2
Dec 29 07:11:10 bitworks-4309-1 sshd[11765]: Failed password for invalid user hotlist from 83.238.12.80 port 44666 ssh2
Dec 29 07:11:58 bitworks-4309-1 sshd[11772]: Failed password for invalid user guard from 203.6.224.84 port 46578 ssh2
Dec 29 07:20:13 bitworks-4309-1 sshd[11886]: Failed password for invalid user borobia from 122.51.142.251 port 35752 ssh2

Root-Login per Name ist bei uns auch verboten. Trotzdem wird es aber von Hackern versucht.

Glück Auf
Tom vom Berg