[plug] was I probed or ignorantly paranoid?

Gavin Chester gavinchester1 at hotmail.com
Wed Mar 30 09:32:23 WST 2005


On Wed, 2005-03-30 at 04:56 +0800, Craig Ringer wrote:
> On Wed, 2005-03-30 at 01:28 +0800, Gavin Chester wrote:
> > I'm not sure whether I was probed or whether I saw some normal traffic
> > to my machine.  Either way it seemed strange to have many repeat ssh
> > requests when no one should be ssh-ing into my PC.  Maybe you guys could
> > shed some light for me? 

-snip-

> >From the (heavily edited) above, it's impossible to say 100% for
> certain, but that looks a lot like they completed setup of session keys,
> tried to authenticate, failed, and disconnected.
> 
> They're probably just scanning for machines with blank root passwords,
> root password "root", etc. Check your /var/log/auth.log for details.
> 

-snip-

Thanks for the analysis and reassurance, Craig.  I'll look into all the
matters you suggested and read, read, read some more :-)

Gavin.




More information about the plug mailing list