[ale] hack attempts

Jim Popovitch jimpop at yahoo.com
Sun Feb 6 23:40:50 EST 2005


--- Jay Loden <jloden at toughguy.net> wrote:
> I got exactly the same thing on my home desktop (which has ssh so 
> I can log in from away) and i mean exactly...same usernames and 
> everything.  
> 
> I'd also be interested to know what if anything one can do about 
> this, besides blocking the IPs 

Just run ssh on another port, something unlike 22 (don't use 44, 222, 2222,
2020, etc).   As someone else mentioned, this looks like a brute force attempt
to login as stupid users.  Someone probably got a hold of a passwd file and
decide to use it against the world.   Lame, very lame.

-Jim P.




More information about the Ale mailing list