[plug] 203.236.241.42 / ndyne.com

[Kai]

Luke Dudney wrote:

> Kai wrote:
> 
>> Anyone getting a lot of login attempts from this IP with the usernames 
>> admin, root and test ?
> 
> 
> 
> Looks like the brute ssh tool which has been used fairly extensively 
> lately. The SANS ISC has been tracking this for a number of weeks: 
> http://isc.sans.org/ (one of the few sites I visit every day).
> 
> Cheers
> Luke

Thanks Luke, James and Craig for the info.
I had nine failed attempts from 16:05 to 16:06 today, have emailed the 
ISP to let them know.

Cheers
Kai