PDA

View Full Version : Script kiddies.


silenze
11-15-2004, 05:43 PM
< rant >

This is almost comical... This just in.. you script kiddie wanna be freakin' n00b.... REMOTE ROOT LOGIN IS DISABLED BY DEFAULT, MORON!@$!!@$

< /rant >

< LOG >

Nov 15 14:29:49 slut dropbear[14761]: Child connection from 209.91.93.125:40145
Nov 15 14:29:51 slut dropbear[14761]: exit before auth (user 'nobody', 2 fails): Disconnect received
Nov 15 14:29:52 slut dropbear[14762]: Child connection from 209.91.93.125:40199
Nov 15 14:29:54 slut dropbear[14762]: exit before auth: Disconnect received
Nov 15 14:29:54 slut dropbear[14763]: Child connection from 209.91.93.125:40261
Nov 15 14:29:56 slut dropbear[14763]: exit before auth: Disconnect received
Nov 15 14:29:57 slut dropbear[14764]: Child connection from 209.91.93.125:40308
Nov 15 14:29:59 slut dropbear[14764]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:29:59 slut dropbear[14766]: Child connection from 209.91.93.125:40362
Nov 15 14:30:01 slut dropbear[14766]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:30:01 slut dropbear[14768]: Child connection from 209.91.93.125:40869
Nov 15 14:30:04 slut dropbear[14768]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:30:04 slut dropbear[14777]: Child connection from 209.91.93.125:40994
Nov 15 14:30:06 slut dropbear[14777]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:30:06 slut dropbear[14778]: Child connection from 209.91.93.125:41378
Nov 15 14:30:10 slut dropbear[14778]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:30:10 slut dropbear[14780]: Child connection from 209.91.93.125:41871
Nov 15 14:30:12 slut dropbear[14780]: exit before auth: Disconnect received
Nov 15 14:30:12 slut dropbear[14781]: Child connection from 209.91.93.125:42005
Nov 15 14:30:15 slut dropbear[14781]: exit before auth: Disconnect received
Nov 15 14:30:15 slut dropbear[14782]: Child connection from 209.91.93.125:42445
Nov 15 14:30:18 slut dropbear[14782]: exit before auth: Disconnect received
Nov 15 14:30:18 slut dropbear[14783]: Child connection from 209.91.93.125:42628
Nov 15 14:30:21 slut dropbear[14783]: exit before auth: Disconnect received
Nov 15 14:30:21 slut dropbear[14784]: Child connection from 209.91.93.125:43047
Nov 15 14:30:23 slut dropbear[14784]: exit before auth: Disconnect received
Nov 15 14:30:24 slut dropbear[14785]: Child connection from 209.91.93.125:43236
Nov 15 14:30:27 slut dropbear[14785]: exit before auth: Disconnect received
Nov 15 14:30:27 slut dropbear[14787]: Child connection from 209.91.93.125:43859
Nov 15 14:30:30 slut dropbear[14787]: exit before auth: Disconnect received
Nov 15 14:30:30 slut dropbear[14788]: Child connection from 209.91.93.125:44608
Nov 15 14:30:34 slut dropbear[14788]: exit before auth: error reading: Connection reset by peer
Nov 15 14:30:37 slut dropbear[14789]: Child connection from 209.91.93.125:45346
Nov 15 14:30:40 slut dropbear[14789]: exit before auth: Disconnect received
Nov 15 14:30:40 slut dropbear[14790]: Child connection from 209.91.93.125:46467
Nov 15 14:30:42 slut dropbear[14790]: exit before auth: Disconnect received
Nov 15 14:30:43 slut dropbear[14791]: Child connection from 209.91.93.125:46869
Nov 15 14:30:45 slut dropbear[14791]: exit before auth: Disconnect received
Nov 15 14:30:45 slut dropbear[14792]: Child connection from 209.91.93.125:47337
Nov 15 14:30:48 slut dropbear[14792]: exit before auth: Disconnect received
Nov 15 14:30:48 slut dropbear[14793]: Child connection from 209.91.93.125:47505
Nov 15 14:30:51 slut dropbear[14793]: exit before auth (user 'mysql', 2 fails): Disconnect received
Nov 15 14:30:51 slut dropbear[14794]: Child connection from 209.91.93.125:47955
Nov 15 14:30:53 slut dropbear[14794]: exit before auth (user 'operator', 1 fails): Disconnect received
Nov 15 14:30:53 slut dropbear[14795]: Child connection from 209.91.93.125:48054
Nov 15 14:30:57 slut dropbear[14795]: exit before auth (user 'adm', 2 fails): Disconnect received
Nov 15 14:30:57 slut dropbear[14798]: Child connection from 209.91.93.125:48567
Nov 15 14:31:00 slut dropbear[14798]: exit before auth: Disconnect received
Nov 15 14:31:00 slut dropbear[14799]: Child connection from 209.91.93.125:48998
Nov 15 14:31:02 slut dropbear[14799]: exit before auth: Disconnect received
Nov 15 14:31:02 slut dropbear[14800]: Child connection from 209.91.93.125:49568
Nov 15 14:31:05 slut dropbear[14800]: exit before auth: Disconnect received
Nov 15 14:31:05 slut dropbear[14801]: Child connection from 209.91.93.125:49817
Nov 15 14:31:09 slut dropbear[14801]: exit before auth (user 'adm', 2 fails): Disconnect received
Nov 15 14:31:09 slut dropbear[14802]: Child connection from 209.91.93.125:50245
Nov 15 14:31:11 slut dropbear[14802]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:11 slut dropbear[14803]: Child connection from 209.91.93.125:50357
Nov 15 14:31:13 slut dropbear[14803]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:14 slut dropbear[14804]: Child connection from 209.91.93.125:50693
Nov 15 14:31:17 slut dropbear[14804]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:20 slut dropbear[14805]: Child connection from 209.91.93.125:51720
Nov 15 14:31:22 slut dropbear[14805]: exit before auth: Disconnect received
Nov 15 14:31:23 slut dropbear[14806]: Child connection from 209.91.93.125:52489
Nov 15 14:31:26 slut dropbear[14806]: exit before auth: Disconnect received
Nov 15 14:31:27 slut dropbear[14807]: Child connection from 209.91.93.125:53173
Nov 15 14:31:29 slut dropbear[14807]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:29 slut dropbear[14808]: Child connection from 209.91.93.125:53568
Nov 15 14:31:32 slut dropbear[14808]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:32 slut dropbear[14809]: Child connection from 209.91.93.125:53939
Nov 15 14:31:34 slut dropbear[14809]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:34 slut dropbear[14810]: Child connection from 209.91.93.125:54224
Nov 15 14:31:39 slut dropbear[14810]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:40 slut dropbear[14811]: Child connection from 209.91.93.125:54877
Nov 15 14:31:42 slut dropbear[14811]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:42 slut dropbear[14812]: Child connection from 209.91.93.125:55177
Nov 15 14:31:47 slut dropbear[14812]: exit before auth: Disconnect received
Nov 15 14:31:47 slut dropbear[14813]: Child connection from 209.91.93.125:55647
Nov 15 14:31:49 slut dropbear[14813]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:49 slut dropbear[14816]: Child connection from 209.91.93.125:55814
Nov 15 14:31:51 slut dropbear[14816]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:52 slut dropbear[14817]: Child connection from 209.91.93.125:56019
Nov 15 14:31:54 slut dropbear[14817]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:54 slut dropbear[14818]: Child connection from 209.91.93.125:56264
Nov 15 14:31:56 slut dropbear[14818]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:56 slut dropbear[14819]: Child connection from 209.91.93.125:56477
Nov 15 14:31:59 slut dropbear[14819]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:31:59 slut dropbear[14820]: Child connection from 209.91.93.125:56630
Nov 15 14:32:01 slut dropbear[14820]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:02 slut dropbear[14821]: Child connection from 209.91.93.125:56905
Nov 15 14:32:04 slut dropbear[14821]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:04 slut dropbear[14822]: Child connection from 209.91.93.125:57144
Nov 15 14:32:06 slut dropbear[14822]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:06 slut dropbear[14823]: Child connection from 209.91.93.125:57340
Nov 15 14:32:09 slut dropbear[14823]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:09 slut dropbear[14824]: Child connection from 209.91.93.125:57506
Nov 15 14:32:11 slut dropbear[14824]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:11 slut dropbear[14825]: Child connection from 209.91.93.125:57921
Nov 15 14:32:13 slut dropbear[14825]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:13 slut dropbear[14826]: Child connection from 209.91.93.125:58172
Nov 15 14:32:16 slut dropbear[14826]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:16 slut dropbear[14827]: Child connection from 209.91.93.125:58373
Nov 15 14:32:20 slut dropbear[14827]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:20 slut dropbear[14828]: Child connection from 209.91.93.125:58775
Nov 15 14:32:22 slut dropbear[14828]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:22 slut dropbear[14829]: Child connection from 209.91.93.125:58983
Nov 15 14:32:24 slut dropbear[14829]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:25 slut dropbear[14830]: Child connection from 209.91.93.125:59155
Nov 15 14:32:27 slut dropbear[14830]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:30 slut dropbear[14831]: Child connection from 209.91.93.125:59986
Nov 15 14:32:35 slut dropbear[14831]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:35 slut dropbear[14832]: Child connection from 209.91.93.125:34279
Nov 15 14:32:38 slut dropbear[14832]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:38 slut dropbear[14833]: Child connection from 209.91.93.125:34797
Nov 15 14:32:40 slut dropbear[14833]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:40 slut dropbear[14834]: Child connection from 209.91.93.125:35065
Nov 15 14:32:42 slut dropbear[14834]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:42 slut dropbear[14835]: Child connection from 209.91.93.125:35235
Nov 15 14:32:44 slut dropbear[14835]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:45 slut dropbear[14836]: Child connection from 209.91.93.125:35555
Nov 15 14:32:49 slut dropbear[14836]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:49 slut dropbear[14838]: Child connection from 209.91.93.125:35989
Nov 15 14:32:51 slut dropbear[14838]: exit before auth (user 'root', 1 fails): Disconnect received
Nov 15 14:32:52 slut dropbear[14839]: Child connection from 209.91.93.125:36074
Nov 15 14:32:58 slut dropbear[14839]: exit before auth (user 'root', 1 fails): Disconnect received

< /LOG >

Maybe he needs the latest version of 'hax_teh_world.pl' ...

jester
11-15-2004, 06:04 PM
Thats one of the advantages/disavantages(depending on the person) of my dsl, they have the incoming remote desktop port blocked so there is no possible way to get in using that route anyhow.

siq
11-15-2004, 09:51 PM
heh, seems like this guy was pretty stupid. you gonna send him a message telling him to go away?

silenze
11-15-2004, 10:36 PM
"What is the time in relation to GMT?

Sincerely,

DXXX
Internet Abuse Team
National Internet Services Support
Telus Communications"


end user -> [smilie=violent1.gif] <- abuse dept.

siq
11-16-2004, 07:16 AM
LOL

homeless bob
03-27-2005, 03:20 AM
I think I'd be pissed if my ISP was blocking ports like that. Mine has 80 and netBIOS blocked. Thats about all I know of.