On 3/20/06, Claude Jones <claude_jones@xxxxxxxxxxxxxx> wrote: > Just to add something to this discussion. Today, I've just noticed that ssh > has become disabled on two separate machines, one at home, and one at my > (snip) ... As root does the command `lastb` show that you've had tens of thousands of attempted log ins? The only recorded successful FC4 ssh break-in on a system I built showed up as tens of thousands of random ssh log-in failures within an hour. When they hit 90,000 per hour the attacker got in. They tried to install a ebay spammer and some other code they had ftp'ed in from S.America somewhere... Of course, the system was reformatted that same day. -- WC (Bill) Jones -- http://youve-reached-the.endoftheinternet.org/
