มี log แจ้งมาที่ server เพียบเลย มันคืออะไรหรอครับ

000000408 Brute-Force Attack detected in service log from IP(s) 61.184.180.114, 66.197.134.70 on User(s) admin, administrator, backup, info, mail, office, postmaster, root, support, temp, test, user, web, webmaster, www Today at 03:04

000000409 Brute-Force Attack detected in service log from IP(s) 208.115.238.197 Today at 03:29

000000410 Brute-Force Attack detected in service log on User(s) spam Today at 03:31

000000411 Brute-Force Attack detected in service log on User(s) abuse, access, account Today at 03:32

000000412 Brute-Force Attack detected in service log from IP(s) 61.184.180.114, 66.197.134.70 on User(s) admin, administrator, backup, info, mail, office, postmaster, root, support, temp, test, user, web, webmaster, www Today at 04:05

000000413 Brute-Force Attack detected in service log on User(s) contact Today at 04:27

000000414 Brute-Force Attack detected in service log from IP(s) 208.115.238.197 Today at 04:30

000000415 Brute-Force Attack detected in service log on User(s) abuse, access, account, spam Today at 04:32

000000416 Brute-Force Attack detected in service log on User(s) data Today at 04:41

000000417 Brute-Force Attack detected in service log on User(s) email Today at 05:04

000000418 Brute-Force Attack detected in service log on User(s) root Today at 05:06

000000419 Brute-Force Attack detected in service log on User(s) contact Today at 05:27

000000420 Brute-Force Attack detected in service log from IP(s) 208.115.238.197 Today at 05:30

000000421 Brute-Force Attack detected in service log on User(s) info Today at 05:37

000000422 Brute-Force Attack detected in service log on User(s) data Today at 05:41

000000423 Brute-Force Attack detected in service log on User(s) email Today at 06:04

000000424 Brute-Force Attack detected in service log from IP(s) 208.115.238.197 Today at 06:31

000000425 Brute-Force Attack detected in service log on User(s) info Today at 06:37

000000426 Brute-Force Attack detected in service log on User(s) mail Today at 06:38

000000427 Brute-Force Attack detected in service log on User(s) root Today at 06:43

000000428 Brute-Force Attack detected in service log on User(s) office Today at 07:16

000000429 Brute-Force Attack detected in service log on User(s) oracle Today at 07:19

000000430 Brute-Force Attack detected in service log from IP(s) 208.115.238.197 Today at 07:32

000000431 Brute-Force Attack detected in service log on User(s) mail Today at 07:39

000000432 Brute-Force Attack detected in service log on User(s) root Today at 07:43

000000433 Brute-Force Attack detected in service log on User(s) server Today at 07:58

000000434 Brute-Force Attack detected in service log on User(s) service Today at 07:59

000000435 Brute-Force Attack detected in service log on User(s) services Today at 08:00

000000436 Brute-Force Attack detected in service log on User(s) spam Today at 08:08

000000438 Brute-Force Attack detected in service log on User(s) office Today at 08:17

000000439 Brute-Force Attack detected in service log on User(s) support Today at 08:18

000000440 Brute-Force Attack detected in service log on User(s) oracle Today at 08:19

000000441 Brute-Force Attack detected in service log on User(s) temp Today at 08:22

000000442 Brute-Force Attack detected in service log on User(s) test Today at 08:24

000000443 Brute-Force Attack detected in service log on User(s) test1 Today at 08:25

000000444 Brute-Force Attack detected in service log on User(s) testing Today at 08:27

000000445 Brute-Force Attack detected in service log from IP(s) 208.115.238.197 Today at 08:32

000000446 Brute-Force Attack detected in service log on User(s) user Today at 08:36

000000447 Brute-Force Attack detected in service log on User(s) root Today at 08:43

000000448 Brute-Force Attack detected in service log on User(s) web Today at 08:44

000000449 Brute-Force Attack detected in service log on User(s) webmaster Today at 08:45

000000450 Brute-Force Attack detected in service log on User(s) webadmin Today at 08:48

000000451 Brute-Force Attack detected in service log on User(s) www Today at 08:51

000000452 Brute-Force Attack detected in service log on User(s) admin Today at 08:53

000000453 Brute-Force Attack detected in service log on User(s) account, backup, data Today at 08:55

000000454 Brute-Force Attack detected in service log on User(s) sybase Today at 08:57

000000455 Brute-Force Attack detected in service log on User(s) informix, lizdy, oracle8, server Today at 08:58

000000456 Brute-Force Attack detected in service log on User(s) service Today at 08:59

แบบนี้เกิดอะไรขึ้นกับ Server หรอครับ log เพียบเลย

DirectAdmin หรือเปล่าครับ

อาการปกติ

โดน Brute Force รหัสผ่าน

ก็ล็อกไฟล์บอกอยู่แล้วครับว่าอะไร

Brute-Force Attack detected

หาอะไรมากันหรือปิดไปเลยฮะ

ทุกวันๆ ปล่อยไปครับ ปกติแล้ว

ถ้าไม่มี เดี่ยวมันไม่ปกติ

ถ้าเป็น SSH ให้เปลี่ยน port ไปเลย พวกนี้เป็น script ยิงมา

ถ้าเป็น POP3 ให้เปลี่ยน Port POP3 ใหม่เป็น port อื่น

ถ้าเป็น IMAP ให้เปลี่ยน Port IMAP ใหม่เป็น port อื่น

แจ้งลูกค้าด้วย

เพราะพวก pop และ imap มันจะหา user ที่มันตั่ง password ง่ายๆ ไว้ ถ้ามันได้ไปมัีนก็จะเอาไปส่ง spam mail