[plug] 203.236.241.42 / ndyne.com

Luke Dudney ldlist at westnet.com.au
Mon Aug 23 17:44:08 WST 2004


Kai wrote:

> Anyone getting a lot of login attempts from this IP with the usernames 
> admin, root and test ?


Looks like the brute ssh tool which has been used fairly extensively 
lately. The SANS ISC has been tracking this for a number of weeks: 
http://isc.sans.org/ (one of the few sites I visit every day).

Cheers
Luke




More information about the plug mailing list