[CentOS-es] Ataque por ssh2.

[Wilmer Arambula]

Ya he configurado mi ssh para que solo autentique desde mi ip, no puede
loguear root, sera necesario que lo deshabilite, ya que he sido victima de
ataques para poder entrar a mi vps, igualmente por el webmin han intentado
pero la clave que tengo es compleja, que me recomiendadn,

Saludos,

Anexo Log del Ataque:

Jun 18 20:07:31 cjtterabyte sshd[22349]: reverse mapping checking
getaddrinfo for 24.202-130-109.adsl-dyn.isp.belgacom.be [109.130.202.24]
failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 18 20:07:32 cjtterabyte sshd[22349]: Failed none for root from
109.130.202.24 port 50811 ssh2
Jun 18 20:07:32 cjtterabyte sshd[22350]: Disconnecting: Too many
authentication failures for root
Jun 18 20:07:32 cjtterabyte sshd[22351]: pam_unix(sshd:auth):
authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
rhost=109.130.202.24  user=root
Jun 18 20:07:34 cjtterabyte sshd[22352]: Disconnecting: Too many
authentication failures for root
Jun 18 20:07:34 cjtterabyte sshd[22351]: Failed password for root from
109.130.202.24 port 50816 ssh2
Jun 18 20:07:35 cjtterabyte sshd[22353]: reverse mapping checking
getaddrinfo for 24.202-130-109.adsl-dyn.isp.belgacom.be [109.130.202.24]
failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 18 20:07:35 cjtterabyte sshd[22353]: pam_unix(sshd:auth):
authentication failure; logname= uid=0 euid=0 tty=ssh ruser=
rhost=109.130.202.24  user=root
Jun 18 20:07:37 cjtterabyte sshd[22353]: Failed password for root from
109.130.202.24 port 50865 ssh2
Jun 18 20:07:37 cjtterabyte sshd[22354]: Disconnecting: Too many
authentication failures for root

-- 
*Wilmer Arambula. *
*Asoc. Cooperativa Tecnologia Terabyte 124, RL.
*