[plug] was I probed or ignorantly paranoid?
Gavin Chester
gavinchester1 at hotmail.com
Wed Mar 30 09:32:23 WST 2005
On Wed, 2005-03-30 at 04:56 +0800, Craig Ringer wrote:
> On Wed, 2005-03-30 at 01:28 +0800, Gavin Chester wrote:
> > I'm not sure whether I was probed or whether I saw some normal traffic
> > to my machine. Either way it seemed strange to have many repeat ssh
> > requests when no one should be ssh-ing into my PC. Maybe you guys could
> > shed some light for me?
-snip-
> >From the (heavily edited) above, it's impossible to say 100% for
> certain, but that looks a lot like they completed setup of session keys,
> tried to authenticate, failed, and disconnected.
>
> They're probably just scanning for machines with blank root passwords,
> root password "root", etc. Check your /var/log/auth.log for details.
>
-snip-
Thanks for the analysis and reassurance, Craig. I'll look into all the
matters you suggested and read, read, read some more :-)
Gavin.
More information about the plug
mailing list