si, ho visto...
grazie...
PS credo che faro un portknocking...
questi log cosa indicano?
codice:
Dec 21 03:40:43 vps sshd[31443]: Invalid user rfmngr from 202.53.76.66
Dec 21 03:40:43 vps sshd[31444]: Invalid user rfmngr from 202.53.76.66
Dec 21 03:40:43 vps sshd[31443]: reverse mapping checking getaddrinfo for 202.53.76.66.nettlinx.com failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 21 03:40:43 vps sshd[31443]: (pam_unix) check pass; user unknown
Dec 21 03:40:43 vps sshd[31443]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.53.76.66
Dec 21 03:40:43 vps sshd[31444]: reverse mapping checking getaddrinfo for 202.53.76.66.nettlinx.com failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 21 03:40:43 vps sshd[31444]: (pam_unix) check pass; user unknown
Dec 21 03:40:43 vps sshd[31444]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.53.76.66
Dec 21 03:40:45 vps sshd[31443]: Failed password for invalid user rfmngr from 202.53.76.66 port 45808 ssh2
Dec 21 03:40:45 vps sshd[31444]: Failed password for invalid user rfmngr from 202.53.76.66 port 45836 ssh2
Dec 21 03:40:47 vps sshd[31448]: Invalid user sales from 202.53.76.66
Dec 21 03:40:47 vps sshd[31448]: reverse mapping checking getaddrinfo for 202.53.76.66.nettlinx.com failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 21 03:40:47 vps sshd[31448]: (pam_unix) check pass; user unknown
Dec 21 03:40:47 vps sshd[31448]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.53.76.66
Dec 21 03:40:47 vps sshd[31447]: Invalid user sales from 202.53.76.66
Dec 21 03:40:47 vps sshd[31447]: reverse mapping checking getaddrinfo for 202.53.76.66.nettlinx.com failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 21 03:40:47 vps sshd[31447]: (pam_unix) check pass; user unknown
Dec 21 03:40:47 vps sshd[31447]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.53.76.66
Dec 21 03:40:49 vps sshd[31448]: Failed password for invalid user sales from 202.53.76.66 port 46371 ssh2
Dec 21 03:40:50 vps sshd[31447]: Failed password for invalid user sales from 202.53.76.66 port 46370 ssh2
...
...
Dec 21 03:50:46 vps sshd[31447]: fatal: Timeout before authentication for 202.53.76.66
Dec 21 03:50:46 vps sshd[31448]: fatal: Timeout before authentication for 202.53.76.66
In particolare, cosa significano i due timeout?