Re: what to do?
From: Alexander Klimov (alserkli_at_inbox.ru)
Date: 08/28/05
- Previous message: dave kleiman: "RE: Computer forensics to uncover illegal internet use"
- In reply to: Bill Smith: "what to do?"
- Next in thread: Anthony J Placilla: "Re: what to do?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 28 Aug 2005 12:19:12 +0300 (IDT) To: Bill Smith <vinet138@yahoo.com>
Hi.
On Thu, 25 Aug 2005, Bill Smith wrote:
> I noticed that someone is trying to hacker into my
> machine. Please see below is the content of
> /var/log/security.
> what I would like some advice of you guys is, what
> will I do with these people?
The remote hosts are usually just owned boxes. If you are sure that
your passwords are strong (or you use pub key authentication) you can
ignore this. If you want to keep you log clean you can either change
your log preferences or run ssh on a non-default port.
See also
http://www.google.com/search?q=ssh%20brute-force%20attacks
-- Regards, ASK
- Previous message: dave kleiman: "RE: Computer forensics to uncover illegal internet use"
- In reply to: Bill Smith: "what to do?"
- Next in thread: Anthony J Placilla: "Re: what to do?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]