POSSIBLE BREAKIN ATTEMPT!

I just had some clown from Vietnam try to break in to one of my servers on SSH.

Security Violations
=-=-=-=-=-=-=-=-=-=
Jun 15 06:25:48 host sshd(pam_unix)[29819]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.234.38.80  user=demo
Jun 15 06:25:48 host sshd[29819]: reverse mapping checking getaddrinfo for 125.234.38.80.adsl.viettel.vn failed - POSSIBLE BREAKIN ATTEMPT!
Jun 15 06:25:48 host sshd[29819]: User demo not allowed because listed in DenyUsers
Jun 15 06:25:50 host sshd[29819]: Failed password for invalid user demo from ::ffff:125.234.38.80 port 2583 ssh2

I would deserve whatever I got if I left Secure Access open to a Demo account!! He had to be in the Demo Cpanel or the firewall would have blocked him for not having a permitted IP Address.

 

Try it on your own host today....