Re: [Trisquel-users] SSH Server Enabled By Default!

[gaming4jc2]

Ha, I definitely should have noticed this before, except I don't use Trisquel  
as my main desktop. It's been busy though...

gnu@PC:/var/log$ grep -ir ssh /var/log/*
/var/log/auth.log:Feb 18 06:45:53 PC sshd[2700]: error: Could not load host  
key: /etc/ssh/ssh_host_ecdsa_key
/var/log/auth.log:Feb 18 06:45:55 PC sshd[2700]: reverse mapping checking  
getaddrinfo for customer-187-174-116-250.uninet-ide.com.mx [187.174.116.250]  
failed - POSSIBLE BREAK-IN ATTEMPT!
/var/log/auth.log:Feb 18 06:45:55 PC sshd[2700]: pam_unix(sshd:auth):  
authentication failure; logname= uid=0 euid=0 tty=ssh ruser=  
rhost=187.174.116.250  user=root
/var/log/auth.log:Feb 18 06:45:55 PC sshd[2700]: pam_winbind(sshd:auth):  
getting password (0x00000388)
/var/log/auth.log:Feb 18 06:45:55 PC sshd[2700]: pam_winbind(sshd:auth):  
pam_get_item returned a password
/var/log/auth.log:Feb 18 06:45:55 PC sshd[2700]: pam_winbind(sshd:auth):  
request wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_USER_UNKNOWN  
(10), NTSTATUS: NT_STATUS_NO_SUCH_USER, Error message was: No such user
/var/log/auth.log:Feb 18 06:45:57 PC sshd[2700]: Failed password for root  
from 187.174.116.250 port 44726 ssh2
/var/log/auth.log:Feb 18 06:45:58 PC sshd[2700]: Received disconnect from  
187.174.116.250: 11: Bye Bye [preauth]
/var/log/auth.log:Feb 18 06:45:58 PC sshd[2703]: error: Could not load host  
key: /etc/ssh/ssh_host_ecdsa_key
/var/log/auth.log:Feb 18 06:46:00 PC sshd[2703]: reverse mapping checking  
getaddrinfo for customer-187-174-116-250.uninet-ide.com.mx [187.174.116.250]  
failed - POSSIBLE BREAK-IN ATTEMPT!
/var/log/auth.log:Feb 18 06:46:00 PC sshd[2703]: pam_unix(sshd:auth):  
authentication failure; logname= uid=0 euid=0 tty=ssh ruser=  
rhost=187.174.116.250  user=root
/var/log/auth.log:Feb 18 06:46:00 PC sshd[2703]: pam_winbind(sshd:auth):  
getting password (0x00000388)
/var/log/auth.log:Feb 18 06:46:00 PC sshd[2703]: pam_winbind(sshd:auth):  
pam_get_item returned a password
/var/log/auth.log:Feb 18 06:46:00 PC sshd[2703]: pam_winbind(sshd:auth):  
request wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_USER_UNKNOWN  
(10), NTSTATUS: NT_STATUS_NO_SUCH_USER, Error message was: No such user
/var/log/auth.log:Feb 18 06:46:02 PC sshd[2703]: Failed password for root  
from 187.174.116.250 port 46361 ssh2