Today I noticed following in my logs: Am I hacked, or some script kidies just try to hack me? System is Etch with Ispconfig Thanks David
"Toata dragostea mea pentru diavola" seems to be a bot: http://www.botsvsbrowsers.com/details/215753/index.html http://johannburkard.de/blog/www/spam/effective-spam-bot-blocking.html http://forums.debian.net/viewtopic.php?p=143651&sid=b1943f9e9d0ad5c7d5ec0f7a6c56b9da I'd block those IP addresses and install fail2ban: http://www.howtoforge.com/fail2ban_debian_etch http://www.howtoforge.com/fail2ban_opensuse10.3 http://www.howtoforge.com/preventing-brute-force-attacks-with-fail2ban-on-fedora9 http://www.howtoforge.com/preventing-brute-force-attacks-with-fail2ban-on-mandriva2008.1
What bothered me, was that "localhost" in log message. I installed fail2ban, and we'll see.. Thanks to all for your help
