Look in /var/log/messages and /var/log/security. ----- Original Message ----- From: "Becky Bradburn" <[EMAIL PROTECTED]> To: "general" <[email protected]>; "Kevin Bucknum" <[EMAIL PROTECTED]> Sent: Tuesday, July 27, 2004 10:21 AM Subject: RE: [brlug-general] Hackers
> How would you know if someone tried to access your system via SSH? (Sorry, I > am a newbie!) > > Becky > >===== Original Message From Kevin Bucknum <[EMAIL PROTECTED]> ===== > >Looks like I've had two attempts on both accounts. All within a hour on > Sunday. > > > > > >----- Original Message ----- > >From: Will Lowe <[EMAIL PROTECTED]> > >Date: Tue, 27 Jul 2004 09:58:34 -0500 > >Subject: [brlug-general] Hackers > >To: Brlug-general <[email protected]> > > > > > > > >Has anybody else had attempts to access their systems via SSH? My site > >and several other site that I manage are showing attempts using the > >guest and test user accounts from many different IP addresses mostly > >from southeast Asia (Japan, Korea, etc) > > > >I'm think that it is some type of automated attempt. I also wonder if > >the addresses could be forged. > > > > > >Will Lowe > > > >_______________________________________________ > >General mailing list > >[email protected] > >http://brlug.net/mailman/listinfo/general_brlug.net > > > _______________________________________________ > General mailing list > [email protected] > http://brlug.net/mailman/listinfo/general_brlug.net > >
