script kiddies or something worse? how can i tell

From: kevin (kevin_at_mtel.co.uk)
Date: 10/26/04 

Date: 26 Oct 2004 02:40:53 -0700

Hi, i'm fairly new to this admin stuff, and have a newbie question,...

i get regularly (but not bombarded) with an obviously script based
access attempts to sshd and ftp, sendmail. I just slap them on the
hosts.deny list and that's the last i hear from them. (i had to move
the sshd port of the main server, it was probed so often).

What i want to know is ...
are these just kids playing about, or spammers trying to break in.
Should i go to a newsgroup trumpeting the ipaddresses?

How can you tell when it's an attack worth 'sharing'?

the script probes usually sshd, and sometimes sendmail or ftp

root
admin
nobody
test
user
guest

Relevant Pages

  • Re: script kiddies or something worse? how can i tell
    ... > i get regularly with an obviously script based ... > the sshd port of the main server, ... but I had to leave ssh open for various ... As the system admin, you need to evaluate the risk. ...
    (comp.os.linux.security)
  • Re: need to modify local group membership via VBscript
    ... Admin run the script on all NT computers. ... script can add domain groups to the local Administrators group. ... how to add a domain group to local administrators account: ...
    (microsoft.public.windows.server.scripting)
  • Re: need to modify local group membership via VBscript
    ... domain admin credentials in the script, then run the script through the ... script would have to use alternate credentials or a third part RunAs tool. ... ' Bind to local Administrators group on remote computer. ...
    (microsoft.public.windows.server.scripting)
  • Re: need to modify local group membership via VBscript
    ... Admin run the script on all NT computers. ... script can add domain groups to the local Administrators group. ... how to add a domain group to local administrators account: ...
    (microsoft.public.windows.server.scripting)
  • Re: Redirect computers to a specific OU by IP Address
    ... Getting theIPaddress of the workstation is easy if you are running the ... script from the workstation. ... COMPLETELY lock them down until an admin put them into the rightOU. ... used for approx 180-240 days (as there is over 1000 computer accounts ...
    (microsoft.public.windows.server.active_directory)