Are these attempts by password crackers??

Odhiambo Washington wash at wananchi.com
Sun Oct 17 22:51:28 PDT 2004


Hello users.
I run several 5.2.1 boxes (in production).

For weeks now, I have seen alot of notifications from periodic/daily
with the output below and I have questions:


1. Is this some virus or some crackers playing around?
2. Why only on 5.2.1 systems and not on any of the 4.10 boxes that I
   also run?
3. Am I supposed to be worried at all? Well, I am not ;)
   I hate the messages though and there must be something here that I
   need to do.


<cut>

Oct 17 10:44:10 gw sshd[4170]: Failed password for nobody from 210.80.96.185 port 52215 ssh2
Oct 17 10:44:19 gw sshd[4172]: Failed password for patrick from 210.80.96.185 port 52337 ssh2
Oct 17 10:44:28 gw sshd[4174]: Failed password for patrick from 210.80.96.185 port 52455 ssh2
Oct 17 10:44:37 gw sshd[4176]: Failed password for root from 210.80.96.185 port 52568 ssh2
Oct 17 10:44:47 gw sshd[4178]: Failed password for root from 210.80.96.185 port 52691 ssh2
Oct 17 10:44:56 gw sshd[4180]: Failed password for root from 210.80.96.185 port 52807 ssh2
Oct 17 10:45:04 gw sshd[4182]: Failed password for root from 210.80.96.185 port 52916 ssh2
Oct 17 10:45:13 gw sshd[4187]: Failed password for root from 210.80.96.185 port 53024 ssh2
Oct 17 10:45:48 gw sshd[4196]: Failed password for cyrus from 210.80.96.185 port 53430 ssh2
Oct 17 10:45:57 gw sshd[4198]: Failed password for www from 210.80.96.185 port 53541 ssh2
Oct 17 10:47:08 gw sshd[4218]: Failed password for mysql from 210.80.96.185 port 55557 ssh2
Oct 17 10:47:17 gw sshd[4220]: Failed password for operator from 210.80.96.185 port 56448 ssh2
Oct 17 10:48:09 gw sshd[4232]: Failed password for root from 210.80.96.185 port 60881 ssh2
Oct 17 10:48:18 gw sshd[4234]: Failed password for root from 210.80.96.185 port 33508 ssh2
Oct 17 10:48:27 gw sshd[4236]: Failed password for root from 210.80.96.185 port 34356 ssh2
Oct 17 10:48:36 gw sshd[4239]: Failed password for jane from 210.80.96.185 port 34809 ssh2
Oct 17 10:48:54 gw sshd[4243]: Failed password for root from 210.80.96.185 port 36507 ssh2
Oct 17 10:49:08 gw sshd[4245]: Failed password for root from 210.80.96.185 port 37354 ssh2
Oct 17 19:28:05 gw sshd[5759]: Failed password for nobody from 200.251.13.5 port 50990 ssh2
Oct 17 19:28:12 gw sshd[5761]: Failed password for patrick from 200.251.13.5 port 51106 ssh2
Oct 17 19:28:19 gw sshd[5763]: Failed password for patrick from 200.251.13.5 port 51210 ssh2
Oct 17 19:28:26 gw sshd[5765]: Failed password for root from 200.251.13.5 port 51321 ssh2
Oct 17 19:28:33 gw sshd[5767]: Failed password for root from 200.251.13.5 port 51421 ssh2
Oct 17 19:28:40 gw sshd[5769]: Failed password for root from 200.251.13.5 port 51518 ssh2
Oct 17 19:28:47 gw sshd[5771]: Failed password for root from 200.251.13.5 port 51618 ssh2
Oct 17 19:28:54 gw sshd[5773]: Failed password for root from 200.251.13.5 port 51716 ssh2
Oct 17 19:29:22 gw sshd[5781]: Failed password for cyrus from 200.251.13.5 port 52077 ssh2
Oct 17 19:29:29 gw sshd[5783]: Failed password for www from 200.251.13.5 port 52166 ssh2
</cut>


http://www.netmeister.org/news/learn2quote.html

--
+======================================================================+
    |\      _,,,---,,_     | Odhiambo Washington    <wash at wananchi.com>
Zzz /,`.-'`'    -.  ;-;;,_ | Wananchi Online Ltd.   www.wananchi.com
   |,4-  ) )-,_. ,\ (  `'-'| Tel: +254 20 313985-9  +254 20 313922
  '---''(_/--'  `-'\_)     | GSM: +254 722 743223   +254 733 744121
+======================================================================+
Eighty percent of air pollution comes from plants and trees.
		-- Ronald Reagan, famous movie star


More information about the freebsd-questions mailing list