30 Apr
2005
30 Apr
'05
13:41
NSK wrote:
from /var/log/messages I see msgs like
sshd[31200]: Illegal user agata sshd[31202]: Illegal user alejandro sshd[31204]: Illegal user alice sshd[31206]: Illegal user alka
All from the same IP address in South Korea.
What should I do?
Peoñle trying to enter in your system with this user. This week, in a customer, I have a lot of bad password for user root, and after three or four days, the got the password and enter, trying and trying.!!! But in my case, was only a amateur, only change the password for root, and the logins was only for 1 minute!