This may offend some members of this list, but recently I personally encountered this SSH Bruteforce activity, but not only in my Linux box, but on my OpenBSD (OBSD) testbox connected to the net outside the firewall.
Before I used this OBSD, I used to have here a Whitebox Linux so that our associates can see our test web deployment, and it was (sickeningly) very slow to my surprise. I replaced it with OBSD and uploaded static HTML pages. Things were OK until the screen reported SSH connection request from an IP (211.234.100.76) using tried usernames and passwords, which I traced coming from KIDC-GABIA (a National Internet Registry) in Seoul, Korea using whois. Anybody who can relate to this incident pls? On 8/4/05, Mhac Janapin <[EMAIL PROTECTED]> wrote: > On 8/3/05, JC de Villa <[EMAIL PROTECTED]> wrote: > > ++-----Original Message----- > > ++From: [EMAIL PROTECTED] [mailto:plug- > > [EMAIL PROTECTED] On Behalf Of Mhac Janapin > > ++Sent: Wednesday, August 03, 2005 2:58 PM > > ++To: The Main Philippine Linux Users' Group (PLUG) Discussion List > > ++Subject: [plug] Re: SSH Bruteforce Activity > > ++ > > ++323232 is just an exaggeration.. ;) > > ++Anyways i switched it to 4444. ;) (any script kiddies out here?) > > [<-----snip----->] > > Present! =Þ j/k. > > > > _________________________________________________ > > Philippine Linux Users' Group (PLUG) Mailing List > > [email protected] (#PLUG @ irc.free.net.ph) > > Read the Guidelines: http://linux.org.ph/lists > > Searchable Archives: http://archives.free.net.ph > > > > > -- > Mhac Janapin > PBTS SysAd > www.pbts.net.ph > ============= > http://mulingsilang.blogspot.com > ============= > I'm an Open Source Enthusiast. c",) > Mozilla Firefox 1 - getfirefox.com > Mozilla Thunderbird 1 - mozilla.org > OpenOffice.org 1 > ============= > _________________________________________________ > Philippine Linux Users' Group (PLUG) Mailing List > [email protected] (#PLUG @ irc.free.net.ph) > Read the Guidelines: http://linux.org.ph/lists > Searchable Archives: http://archives.free.net.ph > -- Tito Mari Francis H. Escaño Computer Engineer and Free Software Proponent _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Read the Guidelines: http://linux.org.ph/lists Searchable Archives: http://archives.free.net.ph
