Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #219453
| From | deloptes <deloptes@gmail.com> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Connection closed by [IP] port [port] [preauth] |
| Date | 2020-02-26 08:00 +0100 |
| Message-ID | <zDYPL-2Sg-5@gated-at.bofh.it> (permalink) |
| References | <zDsGe-7jU-5@gated-at.bofh.it> <zDCcx-5N8-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Tixy wrote: >> Since February 11th at 00:25:09, I am getting the following every 12 >> secondes: >> >> Feb 11 00:25:09 box sshd[17733]: Connection closed by 118.126.105.120 >> port 54422 [preauth] > > I'm getting that too. +1 :( and I am not using standard port 22, so they scanned all 30000 ports and found out what is open (well filtered) and now are trying to do brute force on SSH. Others are trying to exploit apache/php & Co.
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Connection closed by [IP] port [port] [preauth] steve <dlist@bluewin.ch> - 2020-02-24 21:40 +0100
Re: Connection closed by [IP] port [port] [preauth] Dan Ritter <dsr@randomstring.org> - 2020-02-24 22:00 +0100
Re: Connection closed by [IP] port [port] [preauth] steve <dlist@bluewin.ch> - 2020-02-26 07:10 +0100
Re: Connection closed by [IP] port [port] [preauth] john doe <johndoe65534@mail.com> - 2020-02-24 22:10 +0100
Re: Connection closed by [IP] port [port] [preauth] Tixy <tixy@yxit.co.uk> - 2020-02-25 07:50 +0100
Re: Connection closed by [IP] port [port] [preauth] deloptes <deloptes@gmail.com> - 2020-02-26 08:00 +0100
Re: Connection closed by [IP] port [port] [preauth] Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-02-26 08:50 +0100
Re: Connection closed by [IP] port [port] [preauth] Didar Hossain <didar@purlo.in> - 2020-02-29 10:00 +0100
csiph-web