Way OT: SSH worries

[Chris Kissinger]

> I'm getting the following in mail logs (through logwatch) and
> it used to be
> rare, then a few weeks ago it started happening a few times a
> week; now it
> happens several times every day: someone's "jiggling the
> doorknob" on my
> server. Anybody else seen something like this? Is it some
> kind of rootkit,
> or trojan?

This discussion seems to be going around on a number of lists. Apparently
it's getting more and more widespread. Here's some info:

http://isc.sans.org/diary.php?date=2004-07-28
http://isc.sans.org/diary.php?date=2004-07-23


Chris

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).