[ale] hack attempts
Jim Popovitch
jimpop at yahoo.com
Sun Feb 6 23:40:50 EST 2005
--- Jay Loden <jloden at toughguy.net> wrote:
> I got exactly the same thing on my home desktop (which has ssh so
> I can log in from away) and i mean exactly...same usernames and
> everything.
>
> I'd also be interested to know what if anything one can do about
> this, besides blocking the IPs
Just run ssh on another port, something unlike 22 (don't use 44, 222, 2222,
2020, etc). As someone else mentioned, this looks like a brute force attempt
to login as stupid users. Someone probably got a hold of a passwd file and
decide to use it against the world. Lame, very lame.
-Jim P.
More information about the Ale
mailing list