Soha nem adják fel...

Nos, az egyik gépen néztem a denyhosts purge history-ját meg a userneveket, amivel próbálkoztak... Van mindkettő között érdekes. Az ip címek elég jól lokalizálhatóak, elsősorban távolkelet, Kína, Japán és USA. Ami érdekes, hogy pl. a kínaiak mindig felháborodással beszélnek róla, mikor pl. mindenféle spamlisták élén vannak, hogy ők bizony nem. Ellenben ip címek közt vannak olyanok is, melyek pl. valamelyik egyetemhez tartoznak. Mit várnak meguktól, ha még az egyetemi gépeken is pl. ssh botok futnak?
Persze biztos megoldás lenne, ha elraknám a default portról, de így kényelmes... A denyhost mellett egyébként csak RSA kulcsos authentikáció van, így az utóbbi időbe már megfogyatkoztaka próbálkozások, de azért akad még pár kitartó.
Mindenesetre közzéteszem a listát, az ip címmekel kezdjen mindenki azt, amit akar, akár egyből tiltólistára is teheti :). A usernevek meg jók olyan támpontnak, hogy milyen neveket NE válasszunk. :) Bár épeszű ember nagyrészét nem igen választja. Persze szerepelnek olyanok is, melyek gyakran default userei egy szolgáltatásnak, jó példa ez is arra, hogy az ilyennek miért nem szabad engedni a belépést.

Ip címek:


121.119.164.193:1:Fri Apr  4 13:03:54 2008
121.140.91.106:1:Fri Dec 28 18:43:52 2007
122.160.226.146:1:Sat Apr 19 08:38:35 2008
124.109.52.58:1:Tue Mar  4 14:04:27 2008
124.115.244.34:1:Sat Jan  5 12:46:31 2008
125.241.13.2:1:Fri Apr 18 18:37:06 2008
132.248.76.211:1:Mon Apr  7 00:09:26 2008
148.208.199.2:1:Mon Jan 14 10:57:22 2008
158.109.70.42:1:Sun Apr 13 01:23:14 2008
163.27.226.65:1:Thu Feb 14 20:59:06 2008
189.23.251.131:1:Sun Feb 24 11:03:24 2008
189.56.68.90:1:Mon Feb 11 16:57:33 2008
190.144.35.210:1:Sun Apr  6 20:09:02 2008
190.19.87.109:1:Mon Mar 24 21:41:30 2008
195.78.233.182:2:Wed Jan  2 11:44:17 2008
199.0.13.21:1:Sat Mar 29 16:51:35 2008
201.6.150.185:1:Tue Mar 11 14:08:09 2008
201.65.100.3:1:Wed Jan  9 08:51:03 2008
202.105.178.15:1:Tue Apr  1 05:56:45 2008
202.130.109.230:1:Mon Apr  7 06:09:58 2008
202.157.139.51:1:Fri Apr  4 12:03:48 2008
202.66.92.197:1:Thu Dec 27 03:43:44 2007
203.130.216.47:1:Sat Jan 19 15:03:40 2008
203.143.125.74:2:Wed Mar 26 21:45:45 2008
203.198.68.236:1:Mon Dec 31 09:44:07 2007
203.199.92.155:2:Mon Feb  4 20:54:25 2008
206.221.184.124:1:Sat Apr 12 03:21:09 2008
210.129.16.190:1:Fri Feb  1 22:21:04 2008
210.240.241.209:1:Thu Feb 21 15:02:14 2008
210.5.162.42:1:Sun Jan  6 06:47:18 2008
211.112.95.3:1:Wed Mar 19 21:27:58 2008
211.151.239.125:1:Sun Mar 16 17:19:37 2008
211.160.161.146:1:Fri Apr  4 02:02:55 2008
211.203.181.5:1:Fri Jan 25 09:11:27 2008
211.206.123.155:1:Thu Mar  6 10:05:24 2008
211.21.28.238:1:Wed Apr  2 21:00:15 2008
212.203.9.64:1:Mon Jan 21 03:05:36 2008
212.241.214.176:1:Tue Apr 15 02:28:09 2008
213.184.15.139:1:Sun Feb 24 07:03:19 2008
213.193.223.44:1:Thu Apr 17 05:33:18 2008
213.248.62.104:1:Fri Apr 18 19:37:14 2008
216.63.168.117:1:Wed Feb 20 19:01:53 2008
217.219.15.4:1:Fri Mar 21 18:34:05 2008
218.104.164.138:2:Thu Jan  3 08:44:35 2008
218.106.252.119:1:Wed Feb 20 14:01:47 2008
218.108.238.148:1:Tue Mar  4 01:04:11 2008
218.108.8.40:1:Wed Dec 26 21:43:43 2007
218.206.193.29:1:Wed Feb  6 11:54:39 2008
218.24.162.13:1:Mon Feb  4 00:54:16 2008
218.28.225.253:2:Sat Mar  1 02:02:40 2008
219.93.25.93:1:Mon Mar 17 10:21:29 2008
220.128.226.226:1:Thu Mar 13 15:11:51 2008
220.200.113.26:1:Tue Apr 22 00:45:40 2008
220.227.158.83:1:Thu Apr 10 22:18:18 2008
221.133.1.231:1:Thu Feb 21 09:02:07 2008
221.238.193.71:1:Fri Feb 22 03:02:27 2008
221.6.5.237:2:Tue Feb 26 17:04:26 2008
222.133.28.197:1:Thu Apr  3 15:01:52 2008
24.123.108.102:1:Mon Mar  3 19:04:02 2008
58.247.117.74:1:Mon Apr  7 11:10:25 2008
59.63.25.158:1:Mon Mar 24 09:40:26 2008
60.19.30.195:1:Tue Apr  1 02:56:30 2008
60.19.30.199:1:Fri Apr  4 17:04:16 2008
60.195.252.193:1:Sat Feb 23 14:03:03 2008
60.215.8.6:1:Mon Feb 25 20:04:00 2008
60.215.8.7:1:Mon Feb 25 20:04:00 2008
60.32.140.21:1:Tue Mar 11 15:08:11 2008
64.171.8.243:1:Fri Apr 18 19:37:14 2008
64.251.71.134:1:Wed Mar 26 01:43:57 2008
66.111.38.150:1:Sun Feb 17 09:00:27 2008
66.112.209.132:1:Fri Jan 25 19:12:03 2008
66.166.56.233:1:Mon Mar 31 23:56:15 2008
67.19.87.210:1:Sat Mar 22 12:36:07 2008
67.201.33.90:1:Mon Mar  3 05:03:43 2008
71.8.225.194:1:Fri Mar 28 11:49:04 2008
72.21.7.110:1:Fri Feb  1 00:20:52 2008
72.233.3.135:1:Tue Apr 15 21:30:06 2008
74.53.35.2:1:Sun Feb  3 04:54:02 2008
77.221.129.226:1:Tue Feb 12 19:58:11 2008
78.131.140.3:1:Sat Jan  5 14:46:36 2008
78.31.107.212:1:Sun Mar  9 09:06:57 2008
81.26.128.3:2:Wed Feb 27 01:11:35 2008
83.19.86.92:1:Sun Mar  9 16:07:05 2008
83.218.95.34:1:Fri Feb 29 03:02:05 2008
83.222.4.137:1:Sat Feb  9 14:55:35 2008
85.17.3.222:1:Fri Apr  4 08:03:26 2008
85.187.185.18:1:Fri Jan 11 11:53:50 2008
85.19.159.229:1:Thu Apr 10 23:18:24 2008
85.25.153.169:1:Thu Mar 13 15:11:51 2008
87.106.210.109:1:Wed Apr  9 00:13:59 2008
88.191.51.126:1:Sun Mar 23 09:38:20 2008
88.255.27.14:2:Tue Apr 22 13:47:02 2008

Usernevek:


:123:Wed Apr 23 17:04:26 2008
1:1:Wed Mar 26 01:13:24 2008
OOO:1:Wed Feb 20 18:02:52 2008
aaron:10:Mon Apr 21 23:31:02 2008
admin:88:Tue Apr 22 12:39:25 2008
admin1:5:Fri Apr 18 19:09:41 2008
admin10:1:Fri Apr 18 19:09:41 2008
admin2:1:Fri Apr 18 19:09:41 2008
admin3:1:Fri Apr 18 19:09:41 2008
admin4:1:Fri Apr 18 19:09:41 2008
admin5:1:Fri Apr 18 19:09:41 2008
admin6:1:Fri Apr 18 19:09:41 2008
admin7:1:Fri Apr 18 19:09:41 2008
admin8:1:Fri Apr 18 19:09:41 2008
admin9:1:Fri Apr 18 19:09:41 2008
administ:5:Wed Mar 26 21:05:41 2008
administrator:1:Wed Feb  6 10:43:09 2008
alan:1:Thu Mar 13 14:40:17 2008
alias:9:Thu Apr 10 21:07:12 2008
amanda:2:Thu Mar 13 14:40:17 2008
amavis:3:Sun Feb 17 22:57:20 2008
andrea:3:Wed Mar 19 20:44:22 2008
andrew:1:Tue Apr  8 23:15:53 2008
apache:6:Tue Apr 15 01:25:32 2008
apple:1:Tue Apr  8 23:15:53 2008
appserve:4:Wed Mar 26 21:05:41 2008
artechde:2:Sun Mar 23 08:28:43 2008
backup:3:Wed Mar 19 20:44:22 2008
backuppc:1:Tue Apr 15 01:25:32 2008
ben:2:Wed Mar 26 01:13:54 2008
bind:1:Sat Jan  5 14:21:35 2008
bonnie:1:Wed Feb  6 10:43:09 2008
brand:1:Sat Jan  5 14:22:05 2008
bret:3:Tue Apr 22 12:39:25 2008
brian:1:Tue Apr  8 23:15:53 2008
bro:1:Wed Feb 20 18:02:52 2008
bryan:1:Sun Feb 17 08:25:56 2008
bryce:1:Sun Feb 17 08:25:56 2008
bryon:1:Sun Feb 17 08:25:56 2008
bush:2:Mon Jan 14 09:45:48 2008
carlos:1:Thu Mar 13 14:40:17 2008
chris:1:Sun Feb 17 08:25:56 2008
cjohnson:1:Tue Apr  8 23:15:53 2008
clamav:2:Wed Feb 20 18:02:51 2008
clamsmtp:1:Sat Jan  5 14:21:35 2008
clasic:1:Wed Feb  6 10:43:09 2008
craig:2:Sun Mar 23 08:28:43 2008
cvsuser:2:Tue Apr 15 01:26:03 2008
cyrus:8:Thu Apr 10 21:07:12 2008
daimon:4:Sat Mar  1 10:10:48 2008
david:1:Wed Feb  6 10:43:09 2008
demon:1:Wed Mar 26 01:14:24 2008
demouser:3:Tue Apr 22 12:39:25 2008
disk:1:Fri Apr 18 19:09:41 2008
disk1:1:Fri Apr 18 19:09:41 2008
disk2:1:Fri Apr 18 19:09:41 2008
disk3:1:Fri Apr 18 19:09:41 2008
export:1:Tue Apr  8 23:15:53 2008
falcon:1:Tue Apr  8 23:15:53 2008
fatzhen:1:Wed Feb 20 18:02:51 2008
fau:1:Wed Feb 20 18:03:22 2008
fernando:6:Tue Apr 22 12:39:25 2008
fluffy:9:Sat Apr 19 07:27:58 2008
fly:1:Tue Apr  8 23:15:53 2008
fox:1:Sun Feb 17 08:25:56 2008
ftpuser:1:Thu Mar 13 14:40:17 2008
gary:3:Thu Apr 17 05:15:16 2008
gast:3:Tue Apr 15 01:25:32 2008
gerry:1:Tue Apr  8 23:15:53 2008
gica:1:Sat Apr 12 02:33:05 2008
gigi:1:Sun Feb 24 06:02:18 2008
gilmoure:5:Wed Mar 26 21:05:41 2008
gnats:1:Sun Feb  3 23:46:16 2008
gt05:10:Mon Apr 21 23:31:02 2008
guest:48:Sat Apr 19 07:28:28 2008
guest1:3:Wed Mar 19 20:44:22 2008
guest10:1:Sun Feb 24 06:02:18 2008
guest2:3:Wed Mar 19 20:44:22 2008
guest3:3:Wed Mar 19 20:44:22 2008
guest4:3:Wed Mar 19 20:44:22 2008
guest5:3:Wed Mar 19 20:44:22 2008
guest6:2:Wed Mar 19 20:44:22 2008
guest7:2:Wed Mar 19 20:44:52 2008
guest8:1:Sun Feb 24 06:02:18 2008
guest9:1:Sun Feb 24 06:02:18 2008
gulfsemiwebadmin:1:Wed Feb 20 18:02:52 2008
home:1:Thu Mar 13 14:40:18 2008
home1:1:Thu Mar 13 14:40:48 2008
horde:1:Sun Apr  6 19:51:30 2008
html:4:Thu Feb 21 07:52:36 2008
http:2:Wed Mar 26 01:13:54 2008
iceuser:1:Sun Apr  6 19:51:30 2008
identd:1:Sun Feb  3 23:46:16 2008
info:30:Tue Apr 22 12:39:25 2008
iraf:1:Tue Apr 15 01:25:32 2008
irc:1:Thu Mar 13 14:40:17 2008
iris:1:Wed Feb  6 10:43:09 2008
jabber:5:Wed Mar 26 21:05:41 2008
james:1:Thu Mar 13 14:40:18 2008
jamy:1:Wed Feb  6 10:43:09 2008
jerom:1:Mon Mar  3 03:57:12 2008
joan:2:Wed Mar 26 01:13:54 2008
kabatova:2:Mon Feb  4 19:55:54 2008
kia:2:Wed Mar 26 01:13:54 2008
kor:1:Tue Apr 15 01:25:33 2008
lab:1:Tue Apr 15 01:25:32 2008
ldap:1:Thu Mar 13 14:40:17 2008
ldapuser:4:Wed Mar 26 21:05:41 2008
leslie:1:Thu Mar 13 14:40:17 2008
library:3:Fri Mar 28 11:12:30 2008
linux:2:Fri Mar 28 11:12:30 2008
list:2:Thu Mar 13 14:40:17 2008
magazine:1:Tue Apr  8 23:15:53 2008
mailadm:4:Wed Mar 26 21:05:41 2008
mailer:1:Thu Mar 13 14:40:17 2008
mailman:1:Thu Mar 13 14:40:17 2008
mailnull:1:Thu Mar 13 14:40:17 2008
mambo:2:Fri Apr 18 18:43:08 2008
martin:1:Thu Mar 13 14:40:17 2008
master:1:Fri Mar 28 11:12:30 2008
michael:4:Thu Apr 10 21:07:12 2008
michel:1:Thu Mar 13 14:40:17 2008
mike:3:Tue Apr 22 12:39:25 2008
minami:2:Sat Mar  1 01:36:39 2008
murray:1:Tue Apr  8 23:15:53 2008
mysql:3:Sun Feb 17 08:26:26 2008
mysqlshell:2:Fri Apr  4 00:50:48 2008
mythtv:7:Mon Mar  3 03:58:12 2008
mythtvmythtv:1:Mon Mar  3 03:57:42 2008
nagios:6:Fri Apr 18 18:35:06 2008
netdisk:1:Wed Feb 20 18:02:51 2008
netmaster:1:Tue Feb 12 10:34:28 2008
newsroom:1:Tue Apr  8 23:15:53 2008
nscd:1:Thu Mar 13 14:40:17 2008
office:10:Thu Apr 10 21:07:12 2008
oliver:1:Tue Apr 15 01:25:32 2008
oracle:33:Tue Apr 22 12:38:55 2008
patrick:4:Sun Apr  6 19:51:30 2008
pcap:1:Thu Mar 13 14:40:17 2008
pcguest:1:Thu Mar 13 14:40:18 2008
photo:1:Tue Apr  8 23:15:53 2008
pilarova:1:Sat Jan  5 14:21:35 2008
pkg:1:Wed Feb 20 18:02:52 2008
postgres:19:Tue Apr 22 12:39:25 2008
postmaster:1:Thu Apr 10 21:07:12 2008
print:1:Mon Jan 14 09:45:48 2008
production:1:Tue Apr 15 01:25:32 2008
proxy:2:Thu Mar 13 14:40:17 2008
prueba:1:Mon Mar  3 17:55:31 2008
qmaill:1:Thu Mar 13 14:40:17 2008
qscand:1:Wed Feb 20 18:02:51 2008
rebeca:1:Wed Feb  6 10:43:09 2008
recruit:10:Thu Apr 10 21:07:12 2008
relax:1:Tue Apr 15 20:54:32 2008
research:1:Tue Apr  8 23:15:53 2008
rfmngr:2:Wed Apr 23 17:15:27 2008
rh:1:Wed Feb 20 18:02:51 2008
rhousand:2:Sun Mar 23 08:28:43 2008
richard:1:Tue Apr 15 20:54:32 2008
ro:1:Sun Feb  3 23:46:16 2008
robert:4:Mon Feb 25 19:37:29 2008
roberto:4:Mon Feb 25 19:38:00 2008
rolo:1:Sun Apr  6 19:51:30 2008
root:2:Mon Feb 18 21:28:09 2008
root-root:2:Fri Apr  4 11:34:16 2008
root.root:2:Fri Apr  4 11:34:16 2008
root_root:1:Fri Apr  4 11:34:46 2008
rpc:1:Thu Mar 13 14:40:17 2008
rpcuser:1:Thu Mar 13 14:40:17 2008
rtb0:2:Thu Mar  6 08:59:22 2008
rusticos:4:Fri Apr 18 18:43:08 2008
sales:15:Thu Apr 17 03:05:33 2008
samba:10:Thu Apr 10 21:07:12 2008
seba:2:Wed Mar 26 01:13:54 2008
secretariat:1:Thu Mar 13 14:40:17 2008
service:1:Thu Mar 13 14:40:17 2008
services:1:Thu Mar 13 14:40:17 2008
sharon:2:Wed Mar 26 01:13:54 2008
shell:2:Fri Mar 28 11:12:30 2008
shiratori:2:Sat Mar  1 01:36:39 2008
sirsi:1:Tue Apr 15 01:25:32 2008
smmsp:1:Thu Mar 13 14:40:17 2008
spam:7:Thu Apr 10 21:07:12 2008
sparky:1:Wed Feb  6 10:43:09 2008
staff:11:Thu Apr 17 03:05:33 2008
stats:1:Tue Apr 15 01:25:33 2008
stephanie:6:Thu Apr 17 05:15:16 2008
steven:1:Mon Jan 14 09:45:18 2008
stud:11:Mon Apr 21 23:31:02 2008
student:2:Mon Mar 17 09:27:22 2008
supervisor:1:Sun Feb  3 23:46:16 2008
svn:1:Tue Apr 15 01:25:32 2008
swsoft:1:Tue Apr 15 01:25:32 2008
system:1:Sat Apr 12 02:32:05 2008
t_honda:2:Sat Mar  1 01:36:39 2008
takahiro:2:Sat Mar  1 01:36:39 2008
tane:2:Sat Mar  1 01:36:39 2008
temp:2:Thu Mar 13 14:40:17 2008
teo:1:Thu Mar 13 14:40:17 2008
test:133:Sat Apr 19 07:27:58 2008
test1:4:Fri Apr 18 19:09:41 2008
test10:1:Fri Apr 18 19:09:41 2008
test2:3:Fri Apr 18 19:09:41 2008
test3:3:Fri Apr 18 19:09:41 2008
test4:1:Fri Apr 18 19:09:41 2008
test5:1:Fri Apr 18 19:09:41 2008
test6:1:Fri Apr 18 19:09:41 2008
test7:1:Fri Apr 18 19:09:41 2008
test8:1:Fri Apr 18 19:09:41 2008
test9:1:Fri Apr 18 19:09:41 2008
tester:1:Wed Mar 26 01:13:54 2008
testftp:1:Fri Apr 18 19:09:41 2008
testftp2:1:Fri Apr 18 19:09:41 2008
testftp3:1:Fri Apr 18 19:09:41 2008
testftp4:1:Fri Apr 18 19:09:41 2008
testftp5:1:Fri Apr 18 19:09:41 2008
testftp6:1:Fri Apr 18 19:10:11 2008
testing:1:Wed Mar 26 01:13:54 2008
testuser:2:Fri Apr  4 12:27:21 2008
therusty:2:Sun Mar 23 08:28:43 2008
tinydns:1:Wed Feb 20 18:02:51 2008
tomcat:9:Thu Apr 10 21:07:12 2008
trash:11:Mon Apr 21 23:31:02 2008
unix:2:Fri Mar 28 11:12:30 2008
upload:2:Sun Mar 23 08:29:13 2008
user:8:Tue Feb 26 21:52:02 2008
user1:3:Sun Apr  6 23:45:54 2008
user2:2:Sun Apr  6 23:45:54 2008
user4:2:Tue Mar 11 13:58:39 2008
user5:1:Tue Mar 11 13:59:09 2008
vcsa:1:Thu Mar 13 14:40:17 2008
verio:10:Sat Apr 12 02:36:35 2008
virus:6:Thu Apr 10 21:07:12 2008
visitante:1:Mon Mar  3 17:55:31 2008
visitor:1:Mon Mar  3 17:55:31 2008
vmware:1:Tue Apr 15 01:25:32 2008
vpopmail:2:Thu Mar 13 14:40:17 2008
wdpost:1:Wed Feb 20 18:02:51 2008
web:1:Thu Mar 13 14:40:17 2008
webadmin:9:Thu Apr 10 21:07:12 2008
webmaster:12:Thu Apr 10 21:07:12 2008
wei:1:Tue Apr 15 01:25:33 2008
william:8:Mon Apr 21 23:31:32 2008
windowse:5:Wed Mar 26 21:05:41 2008
wolfgang:1:Tue Apr 15 01:25:32 2008
www:2:Sun Apr  6 19:52:00 2008
www-data:1:Thu Mar 13 14:40:17 2008
wwwweb:1:Thu Jan 31 23:26:51 2008
xavi:1:Thu Mar 13 14:40:17 2008
xela:1:Tue Apr 15 20:54:32 2008
xfs:1:Thu Mar 13 14:40:17 2008
yasumoto:2:Sat Mar  1 01:36:39 2008
zope:1:Sat Mar 22 11:58:02 2008

Hozzászólások

Ha már itt vagyunk, nekem meg van egy spamgyűjtő vendégkönyvem. Link nem publikus, elég legyen annyi hozzá, hogy az ip-t mentem a spamek mellé, némelyik még az e-mail címét is megadja. (Jelenleg 1629 spam, az utolsó 2007.4.05. 17:44:32-kor érkezett. Kicsit régi... *) Akit érdekel, az írhat. :)

*: hmm, úgy látszik valamiért nem lehet több hozzászólást beküldeni, ezért nincs több spam. Na majd holnap meghegesztem. :)

mailto: abuse @ ispneve.tld

--
Fontos feladatot soha ne bizz olyan gepre, amit egyedul is fel tudsz emelni!