OVH Community, your new community space.

Server macht ständig Restart


k1ng
11.10.08, 18:49
der scannt wohl deine IP um vllt einen offenen ftpserver zu finden.
PsYDoX
11.10.08, 16:35
mein Root Server - Isgenug macht ständig neustarts...

Hier die Boot.log (hab die logs alle vorher gesäubert, deshalb wohl no such file...)
Code:
Sat Oct 11 17:26:50 2008: .
Sat Oct 11 17:26:50 2008: Activating swap...done.
Sat Oct 11 17:26:50 2008: Checking root file system...fsck 1.40-WIP (14-Nov-2006)
Sat Oct 11 17:26:50 2008: e2fsck 1.40-WIP (14-Nov-2006)
Sat Oct 11 17:26:50 2008: /: clean, 53412/1921984 files, 280097/3839527 blocks
Sat Oct 11 17:26:50 2008: done.
Sat Oct 11 17:26:50 2008: Setting the system clock..
Sat Oct 11 17:26:51 2008: Cleaning up ifupdown....
Sat Oct 11 17:26:51 2008: Loading device-mapper support.
Sat Oct 11 17:26:51 2008: Checking file systems...fsck 1.40-WIP (14-Nov-2006)
Sat Oct 11 17:26:51 2008: e2fsck 1.40-WIP (14-Nov-2006)
Sat Oct 11 17:26:51 2008: /home: clean, 1274/28360704 files, 21486552/56697401 blocks
Sat Oct 11 17:26:51 2008: done.
Sat Oct 11 17:26:51 2008: Setting kernel variables...done.
Sat Oct 11 17:26:51 2008: Mounting local filesystems...done.
Sat Oct 11 17:26:51 2008: Activating swapfile swap...done.
Sat Oct 11 17:26:51 2008: Setting up networking....
Sat Oct 11 17:26:51 2008: Configuring network interfaces...done.
Sat Oct 11 17:26:51 2008: Setting console screen modes and fonts.
Sat Oct 11 17:26:52 2008: ^[[9;30]^[[14;30]chown: failed to get attributes of `/var/log/dmesg': No such file or directory
Sat Oct 11 17:26:52 2008: chmod: failed to get attributes of `/var/log/dmesg': No such file or directory
Sat Oct 11 17:26:52 2008: INIT: Entering runlevel: 2
Sat Oct 11 17:26:52 2008: Starting system log daemon: syslogd\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000  syslogd: /var/log/news/news.crit: No such file or directory
Sat Oct 11 17:26:52 2008: \000\000\000\000\000\000\000\000\000\000\000\000\000\000\000  syslogd: /var/log/news/news.err: No such file or directory
Sat Oct 11 17:26:52 2008: \000\000\000\000\000\000\000\000\000\000\000\000\000\000\000  syslogd: /var/log/news/news.notice: No such file or directory
Sat Oct 11 17:26:52 2008: .
Sat Oct 11 17:26:52 2008: Starting kernel log daemon: klogd.
Sat Oct 11 17:26:52 2008: Starting domain name service...: bind.
Sat Oct 11 17:26:52 2008: ^[[33m*^[[39;49m Not starting internet superserver: no services enabled.
Sat Oct 11 17:26:52 2008: Starting OpenBSD Secure Shell server: sshd.
Sat Oct 11 17:26:52 2008: Starting periodic command scheduler: crond.
Sat Oct 11 17:26:52 2008:
Und hier ne daemon.log wo etwas sehr komisches ständig auftaucht ca jede 2 sekunden
Code:
Oct 11 17:26:52 ks363446 named[2346]: starting BIND 9.3.4-P1.1 -u bind
Oct 11 17:26:52 ks363446 named[2346]: found 1 CPU, using 1 worker thread
Oct 11 17:26:52 ks363446 named[2346]: loading configuration from '/etc/bind/named.conf'
Oct 11 17:26:52 ks363446 named[2346]: no IPv6 interfaces found
Oct 11 17:26:52 ks363446 named[2346]: listening on IPv4 interface lo, 127.0.0.1#53
Oct 11 17:26:52 ks363446 named[2346]: listening on IPv4 interface eth0, 91.121.179.169#53
Oct 11 17:26:52 ks363446 named[2346]: command channel listening on 127.0.0.1#953
Oct 11 17:26:52 ks363446 named[2346]: zone 0.in-addr.arpa/IN: loaded serial 1
Oct 11 17:26:52 ks363446 named[2346]: zone 127.in-addr.arpa/IN: loaded serial 1
Oct 11 17:26:52 ks363446 named[2346]: zone 255.in-addr.arpa/IN: loaded serial 1
Oct 11 17:26:52 ks363446 named[2346]: zone localhost/IN: loaded serial 1
Oct 11 17:26:52 ks363446 named[2346]: running
Oct 11 17:27:02 ks363446 ntpdate[2137]: step time server 91.121.140.141 offset -0.647041 sec
Oct 11 17:34:06 XXXXXXXX proftpd[3126]: XXXXXXXX.kimsufi.com - ProFTPD 1.3.1 (stable) (built Wed Jun 18 06:16:21 UTC 2008) standalone mode STARTUP 
Oct 11 17:34:11 XXXXXXXX proftpd[3182]: XXXXXXXX.kimsufi.com (222.81.182.216[222.81.182.216]) - FTP session opened. 
Oct 11 17:34:14 XXXXXXXX proftpd[3185]: XXXXXXXX.kimsufi.com (58.208.137.133[58.208.137.133]) - FTP session opened. 
Oct 11 17:34:14 XXXXXXXX proftpd[3186]: XXXXXXXX.kimsufi.com (58.208.137.133[58.208.137.133]) - FTP session opened. 
Oct 11 17:34:14 XXXXXXXX proftpd[3187]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:34:15 XXXXXXXX proftpd[3190]: XXXXXXXX.kimsufi.com (121.42.138.222[121.42.138.222]) - FTP session opened. 
Oct 11 17:34:16 XXXXXXXX proftpd[3195]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:34:23 XXXXXXXX proftpd[3200]: XXXXXXXX.kimsufi.com (58.208.137.133[58.208.137.133]) - FTP session opened. 
Oct 11 17:34:23 XXXXXXXX proftpd[3201]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:34:29 XXXXXXXX proftpd[3206]: XXXXXXXX.kimsufi.com (221.208.131.17[221.208.131.17]) - FTP session opened. 
Oct 11 17:34:30 XXXXXXXX proftpd[3207]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:34:37 XXXXXXXX proftpd[3210]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:34:44 XXXXXXXX proftpd[3213]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:34:51 XXXXXXXX proftpd[3216]: XXXXXXXX.kimsufi.com (221.208.131.17[221.208.131.17]) - FTP session opened. 
Oct 11 17:34:51 XXXXXXXX proftpd[3219]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:34:56 XXXXXXXX proftpd[3222]: XXXXXXXX.kimsufi.com (221.208.131.17[221.208.131.17]) - FTP session opened. 
Oct 11 17:34:56 XXXXXXXX proftpd[3223]: XXXXXXXX.kimsufi.com (116.19.80.238[116.19.80.238]) - FTP session opened. 
Oct 11 17:34:57 XXXXXXXX proftpd[3224]: XXXXXXXX.kimsufi.com (121.42.138.222[121.42.138.222]) - FTP session opened. 
Oct 11 17:34:58 XXXXXXXX proftpd[3229]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:35:02 XXXXXXXX proftpd[3304]: XXXXXXXX.kimsufi.com (58.208.137.133[58.208.137.133]) - FTP session opened. 
Oct 11 17:35:05 XXXXXXXX proftpd[3305]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:35:12 XXXXXXXX proftpd[3315]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:35:18 XXXXXXXX proftpd[3318]: XXXXXXXX.kimsufi.com (116.19.80.238[116.19.80.238]) - FTP session opened. 
Oct 11 17:35:19 XXXXXXXX proftpd[3321]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:35:26 XXXXXXXX proftpd[3324]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:35:34 XXXXXXXX proftpd[3327]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:35:36 XXXXXXXX proftpd[3330]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:35:41 XXXXXXXX proftpd[3333]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:35:42 XXXXXXXX proftpd[3336]: XXXXXXXX.kimsufi.com (121.42.138.222[121.42.138.222]) - FTP session opened. 
Oct 11 17:35:43 XXXXXXXX proftpd[3339]: XXXXXXXX.kimsufi.com (116.19.80.238[116.19.80.238]) - FTP session opened. 
Oct 11 17:35:48 XXXXXXXX proftpd[3342]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:35:51 XXXXXXXX proftpd[3345]: XXXXXXXX.kimsufi.com (121.42.138.222[121.42.138.222]) - FTP session opened. 
Oct 11 17:35:52 XXXXXXXX proftpd[3216]: XXXXXXXX.kimsufi.com (221.208.131.17[221.208.131.17]) - FTP session closed. 
Oct 11 17:35:55 XXXXXXXX proftpd[3348]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:36:00 XXXXXXXX proftpd[3351]: XXXXXXXX.kimsufi.com (116.19.80.238[116.19.80.238]) - FTP session opened. 
Oct 11 17:36:02 XXXXXXXX proftpd[3426]: XXXXXXXX.kimsufi.com (91.97.37.39[91.97.37.39]) - FTP session opened. 
Oct 11 17:36:02 XXXXXXXX proftpd[3427]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:36:03 XXXXXXXX proftpd[3432]: XXXXXXXX.kimsufi.com (221.208.131.17[221.208.131.17]) - FTP session opened. 
Oct 11 17:36:09 XXXXXXXX proftpd[3436]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:36:16 XXXXXXXX proftpd[3439]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:36:23 XXXXXXXX proftpd[3442]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened. 
Oct 11 17:36:23 XXXXXXXX proftpd[3443]: XXXXXXXX.kimsufi.com (116.19.80.238[116.19.80.238]) - FTP session opened. 
Oct 11 17:36:27 XXXXXXXX proftpd[3450]: XXXXXXXX.kimsufi.com (121.42.138.222[121.42.138.222]) - FTP session opened. 
Oct 11 17:36:30 XXXXXXXX proftpd[3451]: XXXXXXXX.kimsufi.com (121.18.86.94[121.18.86.94]) - FTP session opened.
Seit dem ist Ruhe... kann man die Ips zurück verfolgen? Scheint ja irgendwie angreider oder so zu sein
Code:
# route add -host 121.18.86.94 reject
# route add -host 221.208.131.17 reject
# route add -host 116.19.80.238 reject