ssh 'attack'

[Net Llama!]

Yup.  And the origin IP addres changes every day.  Last night it was
165.229.192.33 which is in korea.

On Fri, 27 Aug 2004, Roger Oberholtzer wrote:

>
> Following up my earlier question about odd (and failed) attempts to log
> in as various users via ssh, I now see that the attacking systems have
> added 'root' to the users they are trying. Anyone else notice this?
>

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Lonni J Friedman                                netllama at linux-sxs.org
Linux Step-by-step & TyGeMo                  http://netllama.ipfox.com