Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 May 2013 17:10:59 +0200
From:      Jeroen van der Ham <jeroen@dckd.nl>
To:        Outback Dingo <outbackdingo@gmail.com>
Cc:        "freebsd-xen@freebsd.org" <freebsd-xen@freebsd.org>, "xen-users@lists.xen.org" <xen-users@lists.xen.org>, xen-devel <xen-devel@lists.xen.org>, "freebsd-virtualization@freebsd.org" <freebsd-virtualization@freebsd.org>
Subject:   Re: FreeBSD PVHVM call for testing
Message-ID:  <9BD00E17-0A80-44C6-8B7B-2933265F4664@dckd.nl>
In-Reply-To: <CAKYr3zxo0-BOBQuJk_qY2=kbxnMyMR7gffEzoVL%2BYuTmj-Trdg@mail.gmail.com>
References:  <519131D8.9010307@citrix.com> <519E54DE.5090304@citrix.com> <6B8B9354-AF52-4081-B67B-04565D1BCE99@dckd.nl> <51A71616.4060508@citrix.com> <ED94B614-A210-4D0B-A60B-8022C30BB0F1@dckd.nl> <CAKYr3zxo0-BOBQuJk_qY2=kbxnMyMR7gffEzoVL%2BYuTmj-Trdg@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

On 30 May 2013, at 16:56, Outback Dingo <outbackdingo@gmail.com> wrote:
> first is this a public vm ? and if so who is??
> May 29 23:42:30 image01 sshd[31227]: error: Received disconnect from
> 150.165.15.175: 11: Bye Bye [preauth]
>=20
> because it is after this potential ssh login attempt, so is this you, =
has
> there been a breach ? only thing i noticed, but it might be nothing.

This VM is on a public IP indeed, and SSH connectivity is enabled. As =
with any publicly accessible host this then becomes the target of ssh =
scans.

I included the message just to show that between it and the reboot =
nothing had been logged.

AFAICT there has not been a breach, and I have not seen any indications =
at all that there may be one.

Jeroen.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9BD00E17-0A80-44C6-8B7B-2933265F4664>