[brlug-general] Hackers

[Dustin Puryear]

Look in /var/log/messages and /var/log/security.

----- Original Message ----- 
From: "Becky Bradburn" <becky at selu.edu>
To: "general" <general at brlug.net>; "Kevin Bucknum" <drunk.bastard at gmail.com>
Sent: Tuesday, July 27, 2004 10:21 AM
Subject: RE: [brlug-general] Hackers


> How would you know if someone tried to access your system via SSH?
(Sorry, I
> am a newbie!)
>
> Becky
> >===== Original Message From Kevin Bucknum <drunk.bastard at gmail.com> =====
> >Looks like I've had two attempts on both accounts.  All within a hour on
> Sunday.
> >
> >
> >----- Original Message -----
> >From: Will Lowe <wlowe at cox-internet.com>
> >Date: Tue, 27 Jul 2004 09:58:34 -0500
> >Subject: [brlug-general] Hackers
> >To: Brlug-general <general at brlug.net>
> >
> >
> >
> >Has anybody else had attempts to access their systems via SSH? My site
> >and several other site that I manage are showing attempts using the
> >guest and test user accounts from many different IP addresses mostly
> >from southeast Asia (Japan, Korea, etc)
> >
> >I'm think that it is some type of automated attempt. I also wonder if
> >the addresses could be forged.
> >
> >
> >Will Lowe
> >
> >_______________________________________________
> >General mailing list
> >General at brlug.net
> >http://brlug.net/mailman/listinfo/general_brlug.net
>
>
> _______________________________________________
> General mailing list
> General at brlug.net
> http://brlug.net/mailman/listinfo/general_brlug.net
>
>