Soms is het best een goed idee om je logs in de gaten te houden….. Vanmiddag wilde ik inloggen op mijn server, maar dit lukte niet… Dus eens even gekeken, kon er niet inkomen, dus de server maar een herstart gegeven…
Aangezien ik nog wat zaken wilde fine-tunen wilde ik een paar logs bekijken, en kwam er toen achter dat er een stel eikels proberen op mijn server in te breken.. Je begrijpt dat ik dat niet waardeer… Dus hier zijn de aanvallen… (En dit zijn er nog maar een paar…..)
Blijkbaar heeft de hacker een heel botnet erachter zitten, als ik kijk naar de namen waarmee er geprobeerd wordt in te loggen en de ip adressen… Ik heb de poort eerst maar eens dichtgegooid, en ga dan later maar eens kijken hoe ik de boel beter dicht kan timmeren…
SERVER:/var/log # cat hackers.log | awk '{print $2,$1,$3,$19, $20, $21}'
11 Dec 18:16:01 liang from 201-34-125-250.sance300.ipd.brasiltelecom.net.br
11 Dec 18:21:41 libba from adsl-76-230-26-10.dsl.sndg02.sbcglobal.net
11 Dec 18:23:31 libby from 194.224.118.61
11 Dec 18:26:02 libby from 62.221.52.4
11 Dec 18:27:36 libby from host81-149-101-27.in-addr.btopenworld.com
11 Dec 18:29:51 liberty from 81.241.231.149
11 Dec 18:35:43 libra from 201-016-168-017.xf-static.ctbcnetsuper.com.br
11 Dec 18:38:07 libra from 196.47.178.77
11 Dec 18:39:39 libra from 24-181-23-242.static.gwnt.ga.charter.com
11 Dec 18:42:01 licia from p5099bddf.dip0.t-ipconnect.de
11 Dec 18:43:44 licia from 80.232.129.114
11 Dec 18:45:58 licia from 161.red-217-126-90.staticip.rima-tde.net
11 Dec 18:47:48 lida from 203.92.62.162
11 Dec 18:55:58 lidia from static-98-119-110-139.lsanca.dsl-w.verizon.net
11 Dec 18:58:03 lidia from 61.155.105.62
11 Dec 18:59:56 liesel from 91.75.37.38
11 Dec 19:02:30 liesel from adsl-75-14-225-218.dsl.sfldmi.sbcglobal.net
11 Dec 19:04:12 liesel from ppp-69-217-30-214.dsl.applwi.ameritech.net
11 Dec 19:10:15 lieu from 93-152-36-122.bear.managedbroadband.co.uk
11 Dec 19:14:33 liko from csp.radnet.com.br
11 Dec 19:16:34 liko from 212.91.188.165
11 Dec 19:18:40 lila from edunet-static-74.87-197-51.telecom.sk
11 Dec 19:25:02 lilac from gfx146.internetdsl.tpnet.pl
11 Dec 19:26:58 lilac from 213.150.184.130
11 Dec 19:29:13 lilac from host87-101-static.28-79-b.business.telecomitalia.it
11 Dec 19:31:30 lilah from adsl-75-14-225-218.dsl.sfldmi.sbcglobal.net
11 Dec 19:35:21 lilah from lmontsouris-152-62-20-119.w80-13.abo.wanadoo.fr
11 Dec 19:39:35 lilia from 220.225.46.34
11 Dec 19:41:46 lilia from 88-196-206-58-dsl.hps.estpak.ee
11 Dec 19:43:49 lilian from 217.96.70.66
11 Dec 19:45:56 lilian from 220.225.46.34
11 Dec 19:48:09 lilian from host183-147-static.25-87-b.business.telecomitalia.it
11 Dec 19:50:08 lilianna from 115.41.148.16
11 Dec 19:52:35 lilianna from 79.120.226.174
11 Dec 19:54:30 lilianna from 194.224.27.124
11 Dec 19:56:41 liliha from 88-199-28-3.tktelekom.pl
11 Dec 19:58:51 liliha from kgs.interstrada.net
11 Dec 20:01:04 liliha from 81-7-76-88.static.zebra.lt
11 Dec 20:03:18 lilika from pd95b79ed.dip0.t-ipconnect.de
11 Dec 20:05:37 lilika from 23.red-80-24-4.staticip.rima-tde.net
11 Dec 20:07:34 lilika from tombs.force9.co.uk
11 Dec 20:09:58 lilike from pd95b79ed.dip0.t-ipconnect.de
11 Dec 20:11:58 lilike from mail.la-arch.com
11 Dec 20:14:14 lilike from 201.21.216.198
11 Dec 20:16:26 lilith from 123.14.10.64
11 Dec 20:18:46 lilith from trismareperu.com
11 Dec 20:21:04 lilith from 125.73.142.7
11 Dec 20:23:11 lilka from 82.207.103.151
11 Dec 20:25:12 lilka from 220.225.46.34
11 Dec 20:27:30 lilka from 58.39.145.213
11 Dec 20:29:46 lilli from static-70-107-248-126.ny325.east.verizon.net
11 Dec 20:34:09 lilli from 170.56.255.20
11 Dec 20:36:22 lillian from 212.91.188.165
11 Dec 20:38:45 lillian from 190.144.61.58
11 Dec 20:43:22 lilliana from 200.29.135.50
11 Dec 20:47:45 lilliana from 58.230.137.9
11 Dec 20:50:09 lilly from adsl-75-14-225-218.dsl.sfldmi.sbcglobal.net
11 Dec 20:52:26 lilly from hte50.internetdsl.tpnet.pl
11 Dec 20:54:25 lilly from 190.34.148.178
11 Dec 20:56:49 lilo from 81-7-76-88.static.zebra.lt
11 Dec 20:59:07 lilo from 190.34.148.178
11 Dec 21:01:27 lilo from 202.105.131.14
11 Dec 21:03:42 liluye from 81-7-76-88.static.zebra.lt
11 Dec 21:08:15 liluye from 82.207.103.151
11 Dec 21:15:07 lily from 81-208-90-63.ip.fastwebnet.it
11 Dec 21:17:55 limon from 125.73.142.7
11 Dec 21:22:12 limon from 200141223106.user.veloxzone.com.br
11 Dec 21:26:49 lin from 24-181-23-242.static.gwnt.ga.charter.com
11 Dec 21:29:04 lin from mvx-200-196-50-26.mundivox.com
11 Dec 21:31:34 lina from 58.223.242.246
11 Dec 21:33:48 lina from 217.96.70.66
11 Dec 21:36:13 lina from 221.6.71.42
11 Dec 21:38:31 linaeve from gfx146.internetdsl.tpnet.pl
11 Dec 21:43:08 linaeve from 190.144.61.58
11 Dec 21:45:57 lincoln from ppp-70-226-82-138.dsl.klmzmi.ameritech.net
11 Dec 21:50:21 lincoln from 64.213.54.106
11 Dec 21:52:53 linda from hte50.internetdsl.tpnet.pl
11 Dec 21:55:08 linda from 189.16.248.251
11 Dec 21:57:32 linda from c-98-216-38-18.hsd1.ma.comcast.net
11 Dec 21:59:56 lindley from 221.6.71.42
11 Dec 22:04:53 lindley from 85.195.131.12.satgate.net
11 Dec 22:07:18 lindsay from 221.6.71.42
11 Dec 22:12:16 lindsay from 201.15.227.188
11 Dec 22:17:07 lindsey from 200.93.147.114
11 Dec 22:19:20 lindsey from 221.8.255.134
11 Dec 22:21:58 lindy from 95.red-80-33-74.staticip.rima-tde.net
11 Dec 22:24:12 lindy from 81-208-90-63.ip.fastwebnet.it
11 Dec 22:26:48 lindy from 123.14.10.64
11 Dec 22:29:09 linette from 48-dom-14.acn.waw.pl
11 Dec 22:31:43 linette from 98.121.broadband9.iol.cz
11 Dec 22:33:52 linette from 207-250-220-196.escient.com
11 Dec 22:36:29 ling from 201.21.216.198
11 Dec 22:41:35 ling from 213.17.249.114
11 Dec 22:43:43 linh from static-70-107-248-126.ny325.east.verizon.net
11 Dec 22:46:10 linh from 189.17.23.210
11 Dec 22:48:41 linh from mvx-200-196-50-26.mundivox.com
11 Dec 22:53:30 linnea from 221.6.71.42
11 Dec 22:56:00 linnea from 213.17.249.114
11 Dec 22:58:23 linore from 75.145.16.83
11 Dec 23:03:15 linore from 218.108.238.140
11 Dec 23:05:38 linus from 202.106.60.230
11 Dec 23:08:55 linus from 65.113.227.26
11 Dec 23:13:16 liona from ify218.internetdsl.tpnet.pl
11 Dec 23:15:27 liona from 70.19.245.63.alfanumeric.com.ni
11 Dec 23:18:04 liona from mail.hierrobeco.com
11 Dec 23:20:26 lionel from 81-7-76-88.static.zebra.lt
12 Dec 21:25:57 mabyn from 24-181-23-242.static.gwnt.ga.charter.com
12 Dec 21:29:10 mac from trismareperu.com
12 Dec 21:32:12 mac from 194.224.118.61
12 Dec 21:35:05 mac from 121.33.199.40
12 Dec 21:41:08 macaria from 213.136.105.130
12 Dec 21:44:09 macaria from 195.234.169.138
12 Dec 21:47:11 macario from pd907fd08.dip0.t-ipconnect.de