Mailinglist Archive: opensuse (4020 mails)

< Previous Next >
Re: [SLE] Hacking Question
  • From: Rikard Johnels <rikjoh@xxxxxxxxx>
  • Date: Fri, 1 Oct 2004 11:43:20 +0200
  • Message-id: <200410011143.20233.rikjoh@xxxxxxxxx>
On Friday 01 October 2004 08.21, Branimir Vasilic wrote:
> > I have detected recently some users trying to gain access
> > on my server via ssh. I have their IPs and found the servers that
> > these users have access from.
>
> I know this doesn't answer your question but if it's just a bunch of tries
> to ssh as guest, admin or test you can try changing your ssh port. I had
> the same problem and after changing the port these went away.
>
> Brana
There was talk of a new wave of exploits/viruses that tries to gain access via
shh. It tries to find entries for guest/admin and a few other common ones.

Might be something like that.

--
/Rikard

------------------------------------------------------------------------------------
Rikard Johnels email : rikjoh@xxxxxxxxx
Web : http://www.rikjoh.com
Mob : +46 735 05 51 01

------------------------ Public PGP fingerprint ----------------------------
< 15 28 DF 78 67 98 B2 16 1F D3 FD C5 59 D4 B6 78 46 1C EE 56 >

< Previous Next >
Follow Ups