Security Incidents mailing list archives

Re: SSH attacks?

From: Tobias Rice <rice () up edu>
Date: Tue, 27 Jul 2004 11:00:22 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


| Does anyone know why this would appear all of a sudden?
I'm getting *lots* of these, too. I just assumed it was a new sk tool
since the first time I had this in IDS I tracked it to a compromised
redhat box in Italy. One varient also tried root.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD4DBQFBBpg2RJX8S0T0CkURAsIMAJjkce27YaZC57zV7Dboi5i6PA/SAJ4sZ+yX
lVgkaaT6n8x+EwN2A5BLwg==
=piUs
-----END PGP SIGNATURE-----

Current thread:

SSH attacks? Robin (Jul 27)
- Re: SSH attacks? Tobias Rice (Jul 27)
  - Re: SSH attacks? Chris Brenton (Jul 28)
- Re: SSH attacks? Josh Tolley (Jul 27)
- Re: SSH attacks? Chris Brown (Jul 27)
- Re: SSH attacks? Adam Young (Jul 27)
  - Re: SSH attacks? Christine Kronberg (Jul 29)
    - Re: SSH attacks? Pieter-Bas IJdens (Jul 29)
    - Re: SSH attacks? Christine Kronberg (Jul 29)
    - Re: SSH attacks? Pieter-Bas IJdens (Jul 30)
    - Re: SSH attacks? Frank Knobbe (Jul 30)
    - Re: SSH attacks? Jay D. Dyson (Jul 30)

(Thread continues...)