|
Security Incidents
mailing list archives
Re: SSH probes?
From: Klaus Lichtenwalder <k.lichtenwalder () computer org>
Date: Wed, 12 May 2004 18:07:30 +0200
Yes. Same here, same address, lots of tests:
May 1 00:59:24 server sshd[29732]: Illegal user info from 211.216.53.20
May 1 00:59:24 server sshd(pam_unix)[29732]: authentication failure;
logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=211.216.53.20
May 1 00:59:26 server sshd[29732]: Failed none for illegal user info
from 211.216.53.20 port 43789 ssh2
May 1 00:59:29 server sshd[29732]: Failed password for illegal user
info from 211.216.53.20 port 43789 ssh2
May 1 00:59:29 server sshd(pam_unix)[29732]: 1 more authentication
failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=211.216.53.20
Machine is UTC
Klaus
--
------------------------------------------------------------------------
Klaus Lichtenwalder, Dipl. Inform., http://www.webforum.de/Klaus/
Fax +49-(0)89-9103579 Lichtenwalder () ACM org
NIC: KL2100, KL76-RIPE K.Lichtenwalder () Computer org
PGP Key fingerprint =4194 C7B8 C74E C607 E440 F075 BCA0 6B94 1B33 3FB7
Attachment:
signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil
By Date
By Thread
Current thread:
|