brute force ssh attack

[Håkan Persson]

Matthew Miller wrote:

>Were there any interesting files in the users' home directories? (Look for
>hidden files too, of course -- maybe a hidden directory named ... or
>something.) Also check in /tmp and /var. And any luck with the
>.bash_history? (For both the users and for root....)
>  
>


I have installed and use this stuff, http://www.rootkit.nl/, but it has
never found any vulnerabilities (which probably does mean anything...)

/Håkan