Gentoo Archives: gentoo-user

From: Paul Hartman <paul.hartman+gentoo@×××××.com>
To: gentoo-user@l.g.o
Subject: [gentoo-user] Usernames in ssh attacks
Date: Thu, 19 Mar 2009 15:19:40
Message-Id: 58965d8a0903190819j61cdf7a1o6a070f7a275066ab@mail.gmail.com
1 In my ssh logs this morning I noticed a couple login attempts with
2 usenames on them... I've never seen that before. It is usually just an
3 IP address.
4
5 Mar 18 20:19:48 [sshd] refused connect from postmaster@×××××××××××××××××××.co
6 Mar 18 23:42:44 [sshd] refused connect from 211.116.136.107
7 Mar 18 23:44:44 [sshd] refused connect from
8 [U2FsdGVkX19g32YZVKMsQkl+mouWITILOicY4Iq9OQo=]@211.116.136.107
9 Mar 19 02:41:09 [sshd] refused connect from 221.194.128.66
10
11 weird... maybe the bad guys are up to something new.

Replies

Subject Author
Re: [gentoo-user] Usernames in ssh attacks "Johan Blåbäck" <johan.bluecreek@×××××.com>
[gentoo-user] Re: Usernames in ssh attacks Nicolas Sebrecht <nicolas.s-dev@×××××××.net>
RE: [gentoo-user] Usernames in ssh attacks Adam Carter <Adam.Carter@×××××××××.au>