On Tuesday 08 November 2005 08:52, Dan Abernathy wrote:
Hello all
I notice several automated break-in attempts appearing in /var/log/messages regarding sshd. A small sample:
Nov 7 14:34:10 d8400 sshd[18607]: Invalid user a from 71.129.198.189 Nov 7 14:34:11 d8400 sshd[18609]: Invalid user aaron from 71.129.198.189
snip Not only on ssh, but since about a week also massive attempts on the ftp port, although I don't see what it is good for, as anyone can get all the data there by anonymous login and what is shared out on ftp is a dvd read-only media. Nov 15 18:34:52 basilisk vsftpd: Tue Nov 15 18:34:50 2005 [pid 5345] [anyone] FAIL LOGIN: Client "172.178.161.19" Nov 15 18:35:00 basilisk vsftpd: Tue Nov 15 18:34:58 2005 [pid 5349] [admin] FAIL LOGIN: Client "172.178.161.19" Peter