Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Automated SSH login attempts?
From: Andrew Farmer <andfarm () teknovis com>
Date: Sun, 25 Jul 2004 16:11:32 -0700

On 22 Jul 2004, at 07:47, Jay Libove wrote:
[ Posted to full disclosure and vulnwatch; please edit reply address(es)
as appropriate. Thanks. -Jay ]

My Linux system, and a Linux system run by a friend here in the same city
but on a completely different netblock (different ISP), have both seen
apparently automated attempts to log in to our systems via SSH in the past
few days.  Looks like a script.

I've seen the same, coming from hosts all over the Net. The accounts tried seem to be "guest", "test", "root", and "admin". First hit was around 11:15 PM PST, 22 July.

Attachment: PGP.sig
Description: This is a digitally signed message part

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]