Way OT: SSH worries

[Martin Hepworth]

<x-flowed>
Seems to be a common occurrance at the moment..


http://seclists.org/lists/incidents/2004/Jul/0065.html

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Ugo Bellavance wrote:
> Alex Neuman wrote:
>
>> I'm getting the following in mail logs (through logwatch) and it used
>> to be
>> rare, then a few weeks ago it started happening a few times a week;
>> now it
>> happens several times every day: someone's "jiggling the doorknob" on my
>> server. Anybody else seen something like this? Is it some kind of
>> rootkit,
>> or trojan?
>>
>> I think I'm going to have to add a rule to drop port 22 packets from
>> anywhere but a few locations if this continues.
>
>
> Similar scenario on my home server.  I don't have ssh open at the office.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>