On Friday 01 October 2004 08.21, Branimir Vasilic wrote:
I have detected recently some users trying to gain access on my server via ssh. I have their IPs and found the servers that these users have access from.
I know this doesn't answer your question but if it's just a bunch of tries to ssh as guest, admin or test you can try changing your ssh port. I had the same problem and after changing the port these went away.
Brana There was talk of a new wave of exploits/viruses that tries to gain access via shh. It tries to find entries for guest/admin and a few other common ones.
Might be something like that. -- /Rikard ------------------------------------------------------------------------------------ Rikard Johnels email : rikjoh@norweb.se Web : http://www.rikjoh.com Mob : +46 735 05 51 01 ------------------------ Public PGP fingerprint ---------------------------- < 15 28 DF 78 67 98 B2 16 1F D3 FD C5 59 D4 B6 78 46 1C EE 56 >