PUBNET - hackers, trying to break into my system! [211.34.235.0 - 211.34.235.63]: Access denied on a firewall level! === My complaint === Content-Type: text/plain; charset="us-ascii" From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person To: abuse@pubnet.ne.kr, chncheon@soback.kornet21.net Subject: Hacking attempts from your user! Date: Sun, 23 Mar 2003 00:18:38 +0200 User-Agent: KMail/1.4.3 Cc: X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200303230018.38333@2003.dolphinwave.org> Status: RO X-Status: S The abuser tried to break into this system, using "mysql" and "postgres" as login names. Please, stop this hacking activity NOW, or your whole network will be null-routed! Abuser: [211.34.235.62] KIMHWA-E PUBNET IP block [211.34.235.0-211.34.235.63] Data: Mar 22 01:56:27 - 01:56:41 (GMT+0200) ======= Hacking attempts logs ======= Mar 22 01:56:27 orca sshd[22867]: Did not receive identification string from 211.34.235.62 Mar 22 01:56:37 orca sshd[22868]: Could not reverse map address 211.34.235.62. Mar 22 01:56:37 orca sshd[22869]: Failed keyboard-interactive for illegal user mysql from 211.34.235.62 port 4091 ssh2 Mar 22 01:56:38 orca sshd[22869]: Failed password for illegal user mysql from 211.34.235.62 port 4091 ssh2 Mar 22 01:56:39 orca sshd[22869]: Connection closed by 211.34.235.62 Mar 22 01:56:40 orca sshd[22868]: Failed password for postgres from 211.34.235.62 port 4090 ssh2 Mar 22 01:56:41 orca sshd[22868]: Connection closed by 211.34.235.62