[ale] hack attempts

Bob Toxen transam at verysecurelinux.com
Tue Feb 8 16:46:11 EST 2005


On Sun, Feb 06, 2005 at 08:35:44PM -0800, Jim Popovitch wrote:
> --- Jay Loden <jloden at toughguy.net> wrote:
> > I got exactly the same thing on my home desktop (which has ssh so 
> > I can log in from away) and i mean exactly...same usernames and 
> > everything.  
> > 
> > I'd also be interested to know what if anything one can do about 
> > this, besides blocking the IPs 

> Just run ssh on another port, something unlike 22 (don't use 44, 222, 2222,
> 2020, etc).   As someone else mentioned, this looks like a brute force attempt
> to login as stupid users.  Someone probably got a hold of a passwd file and
> decide to use it against the world.   Lame, very lame.
This is "Security by Obsecurity" and it is not a good solution.  See my last
email and also use a REAL good password.

> -Jim P.
Bob



More information about the Ale mailing list