posted by
pmsumner at 09:11pm on 28/08/2004
Looks like a r00tk1t to me...
Aug 28 12:49:42 pmsumner sshd[11337]: Illegal user test from :ffff:217.199.133.28
Aug 28 12:49:45 pmsumner sshd[11339]: Illegal user guest from ::ffff:217.199.133.28
Aug 28 12:49:47 pmsumner sshd[11341]: Illegal user admin from ::ffff:217.199.133.28
Aug 28 12:49:48 pmsumner sshd[11343]: Illegal user admin from ::ffff:217.199.133.28
Aug 28 12:49:50 pmsumner sshd[11345]: Illegal user user from ::ffff:217.199.133.28
Aug 28 12:49:51 pmsumner sshd[11347]: Failed password for root from ::ffff:217.199.133.28 port 35370 ssh2
Aug 28 12:49:53 pmsumner sshd[11349]: Failed password for root from ::ffff:217.199.133.28 port 35426 ssh2
Aug 28 12:49:57 pmsumner sshd[11351]: Failed password for root from ::ffff:217.199.133.28 port 35472 ssh2
Aug 28 12:49:58 pmsumner sshd[11353]: Illegal user test from ::ffff:217.199.133.28
Like I'm going to leave a random "test" account around for you to play with - pshah!
Wonder whether I can find anything about their 'pooter? *evil glint*
Aug 28 12:49:42 pmsumner sshd[11337]: Illegal user test from :ffff:217.199.133.28
Aug 28 12:49:45 pmsumner sshd[11339]: Illegal user guest from ::ffff:217.199.133.28
Aug 28 12:49:47 pmsumner sshd[11341]: Illegal user admin from ::ffff:217.199.133.28
Aug 28 12:49:48 pmsumner sshd[11343]: Illegal user admin from ::ffff:217.199.133.28
Aug 28 12:49:50 pmsumner sshd[11345]: Illegal user user from ::ffff:217.199.133.28
Aug 28 12:49:51 pmsumner sshd[11347]: Failed password for root from ::ffff:217.199.133.28 port 35370 ssh2
Aug 28 12:49:53 pmsumner sshd[11349]: Failed password for root from ::ffff:217.199.133.28 port 35426 ssh2
Aug 28 12:49:57 pmsumner sshd[11351]: Failed password for root from ::ffff:217.199.133.28 port 35472 ssh2
Aug 28 12:49:58 pmsumner sshd[11353]: Illegal user test from ::ffff:217.199.133.28
Like I'm going to leave a random "test" account around for you to play with - pshah!
Wonder whether I can find anything about their 'pooter? *evil glint*
(no subject)
(no subject)
I probably won't - simply down to the time factor. It's a 3hr journey down and back, doesn't make it worth it for the short time I'd be there. Will be back down in a few weeks time though, for sure.