Way OT: SSH worries

Ugo Bellavance ugob at CAMO-ROUTE.COM
Mon Aug 16 16:11:08 IST 2004


<x-flowed>
Alex Neuman wrote:

> I'm getting the following in mail logs (through logwatch) and it used to be
> rare, then a few weeks ago it started happening a few times a week; now it
> happens several times every day: someone's "jiggling the doorknob" on my
> server. Anybody else seen something like this? Is it some kind of rootkit,
> or trojan?
>
> I think I'm going to have to add a rule to drop port 22 packets from
> anywhere but a few locations if this continues.

Similar scenario on my home server.  I don't have ssh open at the office.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>



More information about the MailScanner mailing list