My linode was accused of being attacked
My linode was accused of being attacked,who can tell me why this happen,and how to fix it? why this happen ,I have install oraclle 11g in my linode.
Jul 3 19:34:01 ip22 sshd[10818]: Invalid user tx from 139.162.11.12
Jul 3 19:34:03 ip22 sshd[10818]: Failed password for invalid user tx from 139.162.11.12 port 58684 ssh2
Jul 3 19:34:03 ip22 sshd[10819]: Received disconnect from 139.162.11.12: 11: Bye Bye
Jul 3 19:43:17 ip22 sshd[13996]: Invalid user arthur from 139.162.11.12
Jul 3 19:43:18 ip22 sshd[13996]: Failed password for invalid user arthur from 139.162.11.12 port 58518 ssh2
Jul 3 19:43:19 ip22 sshd[14005]: Received disconnect from 139.162.11.12: 11: Bye Bye
Jul 3 19:46:42 ip22 sshd[14703]: Invalid user sjx from 139.162.11.12
1 Reply
jyoo
Linode Staff
The logs you've provided indicate that a brute force attack occurred. If you received a ticket indicating that your Linode was attacking other servers, you'll find this Linode Community Questions post to be helpful. If you noticed this activity on your own Linode, such as in your auth.log file, this resource will be more helpful.