pmsumner: (Default)
posted by [personal profile] pmsumner at 09:11pm on 28/08/2004
Looks like a r00tk1t to me...

Aug 28 12:49:42 pmsumner sshd[11337]: Illegal user test from :ffff:217.199.133.28
Aug 28 12:49:45 pmsumner sshd[11339]: Illegal user guest from ::ffff:217.199.133.28
Aug 28 12:49:47 pmsumner sshd[11341]: Illegal user admin from ::ffff:217.199.133.28
Aug 28 12:49:48 pmsumner sshd[11343]: Illegal user admin from ::ffff:217.199.133.28
Aug 28 12:49:50 pmsumner sshd[11345]: Illegal user user from ::ffff:217.199.133.28
Aug 28 12:49:51 pmsumner sshd[11347]: Failed password for root from ::ffff:217.199.133.28 port 35370 ssh2
Aug 28 12:49:53 pmsumner sshd[11349]: Failed password for root from ::ffff:217.199.133.28 port 35426 ssh2
Aug 28 12:49:57 pmsumner sshd[11351]: Failed password for root from ::ffff:217.199.133.28 port 35472 ssh2
Aug 28 12:49:58 pmsumner sshd[11353]: Illegal user test from ::ffff:217.199.133.28

Like I'm going to leave a random "test" account around for you to play with - pshah!

Wonder whether I can find anything about their 'pooter? *evil glint*

May

SunMonTueWedThuFriSat
      1
 
2
 
3
 
4
5
 
6
 
7
 
8
 
9
 
10
 
11
 
12
 
13
 
14
 
15
 
16
 
17
 
18
 
19
 
20
 
21
 
22
 
23
 
24
 
25
 
26
 
27
 
28
 
29
 
30
 
31