On Sat, 2004-07-24 at 06:28, Edwin Dicker wrote:
The last two days i got bugged by someone from korea and someone from
japan.
his is what i find in my LogWatch :
--------------------- SSHD Begin ------------------------
Failed logins from these:
guest/password from ::ffff:211.119.136.170: 1 Time(s)
test/password from ::ffff:211.119.136.170: 1 Time(s)
Illegal users from these:
guest/none from ::ffff:211.119.136.170: 1 Time(s)
guest/password from ::ffff:211.119.136.170: 1 Time(s)
test/none from ::ffff:211.119.136.170: 1 Time(s)
test/password from ::ffff:211.119.136.170: 1 Time(s)
is this a known hack attempt by some sort of program ? because for both
tries the same usernames have been tried to use : guest and test
cheers
Edwin
I have seen a lot of this lately too. I've just started blocking each
individual IP address as it comes up so they can't try again.
--
Thanks,
Tom Sapp
http://www.sappsworld.com