On Sat, 2004-07-24 at 06:28, Edwin Dicker wrote: > The last two days i got bugged by someone from korea and someone from japan. > his is what i find in my LogWatch : > --------------------- SSHD Begin ------------------------ > > > Failed logins from these: > guest/password from ::ffff:211.119.136.170: 1 Time(s) > test/password from ::ffff:211.119.136.170: 1 Time(s) > > Illegal users from these: > guest/none from ::ffff:211.119.136.170: 1 Time(s) > guest/password from ::ffff:211.119.136.170: 1 Time(s) > test/none from ::ffff:211.119.136.170: 1 Time(s) > test/password from ::ffff:211.119.136.170: 1 Time(s) > > is this a known hack attempt by some sort of program ? because for both > tries the same usernames have been tried to use : guest and test > > cheers > Edwin I have seen a lot of this lately too. I've just started blocking each individual IP address as it comes up so they can't try again. -- Thanks, Tom Sapp http://www.sappsworld.com
