[lug] Cracking attempts via SSH

Daniel Miller dan.miller at usu.edu
Thu Aug 19 23:06:40 MDT 2004


On Thu, 19 Aug 2004 11:45:36 -0600 (MDT)
Bill Thoen <bthoen at gisnet.com> wrote:

> Back around July 26, I first started seeing unauthorized attempts to
> gain access to my server via ssh. The pattern was to try accessing an
> account named 'test', then 2 seconds later to try the account 'guest.'
> The originating IPs were from Korea and China (of course) Italy,
> Russia, and other european sources. Even one from the class B network
> I'm on.
> 

<snip>

> 
> - Bill Thoen
> 
> 

I haven't personally seen any myself, but another LUG I deal with has a
thread on the exact same issue.  You can see their discussion at:

http://mailman.plug.org/pipermail/pluglist/2004-July/009303.html

Dan



More information about the LUG mailing list