J'ai un serveur Ubuntu 12.04 avec un accès ssh ouvert pour pouvoir y accéder via Nautilus depuis mes PC.
Depuis quelques jours, mon PC (192.168.0.3) rempli les log du serveurs de messages d'authentification loupée.
Dec 17 14:46:05 opti745 sshd[1182]: Failed password for root from 192.168.0.3 port 58328 ssh2
Dec 17 14:46:05 opti745 sshd[1182]: Failed password for root from 192.168.0.3 port 58328 ssh2
Dec 17 14:46:05 opti745 sshd[1182]: Connection closed by 192.168.0.3 [preauth]
Dec 17 14:46:05 opti745 sshd[1184]: Failed password for root from 192.168.0.3 port 58329 ssh2
Dec 17 14:46:05 opti745 sshd[1184]: Failed password for root from 192.168.0.3 port 58329 ssh2
Dec 17 14:46:05 opti745 sshd[1184]: Connection closed by 192.168.0.3 [preauth]
Dec 17 14:46:05 opti745 sshd[1186]: Failed password for root from 192.168.0.3 port 58330 ssh2
Dec 17 14:46:05 opti745 sshd[1186]: Failed password for root from 192.168.0.3 port 58330 ssh2
Dec 17 14:46:05 opti745 sshd[1186]: Connection closed by 192.168.0.3 [preauth]
Dec 17 14:46:05 opti745 sshd[1188]: Failed password for root from 192.168.0.3 port 58331 ssh2
Dec 17 14:46:05 opti745 sshd[1188]: Failed password for root from 192.168.0.3 port 58331 ssh2
Dec 17 14:46:05 opti745 sshd[1188]: Connection closed by 192.168.0.3 [preauth]
Dec 17 14:46:06 opti745 sshd[1190]: Failed password for root from 192.168.0.3 port 58332 ssh2
Dec 17 14:46:06 opti745 sshd[1190]: Failed password for root from 192.168.0.3 port 58332 ssh2
Dec 17 14:46:06 opti745 sshd[1190]: Connection closed by 192.168.0.3 [preauth]
Dec 17 14:46:06 opti745 sshd[1192]: Failed password for root from 192.168.0.3 port 58333 ssh2
Dec 17 14:46:06 opti745 sshd[1192]: Failed password for root from 192.168.0.3 port 58333 ssh2
Dec 17 14:46:06 opti745 sshd[1192]: Connection closed by 192.168.0.3 [preauth]
Dec 17 14:46:06 opti745 sshd[1194]: Failed password for root from 192.168.0.3 port 58334 ssh2
Dec 17 14:46:06 opti745 sshd[1194]: Failed password for root from 192.168.0.3 port 58334 ssh2
Dec 17 14:46:06 opti745 sshd[1194]: Connection closed by 192.168.0.3 [preauth]
Vu coté PC, ça se manifeste par une lenteur pour afficher les fichiers d'un répertoire du serveur.
Si je me connecte depuis un autre PC du réseau, le problème ne se pose pas
Dec 17 14:55:28 opti745 sshd[1652]: Accepted password for root from 192.168.0.102 port 57087 ssh2
Dec 17 14:55:28 opti745 sshd[1652]: pam_unix(sshd:session): session opened for user root by (uid=0)
Dec 17 14:55:29 opti745 sshd[1652]: subsystem request for sftp by user root
Alors la question est simple, quelle différence entre ce "preauth" et "subsystem request"
Les deux PC sont en Ubuntu 12.04 avec les mises à jours faîtes, et les tests sont fait avec la fonction menu "fichier" -> "se connecter à un serveur".
