Re: unsuccessful hacking attempt at my machine

From: Kevin Drapel (kevin.drapel_at_epfl.ch)
Date: 01/26/05


Date: Wed, 26 Jan 2005 00:45:58 +0100


> I noticed there was presumably a hacking attempt at my Debian Sarge
> machine running 2.6.9 Vanilla kernel. The machine is completely updates
> and is behind a router. The router has a firewall and it's port 22 is
> being forwarded to my machine. The machine also has a firewall. Seems
> like somebody was trying the dictionary attack(?). From the logs below:
> What does that "ffff" mean? Seconday, do these attempts give me enough
> reason (and right?) to attempt an nmap scan at the source IP?

maybe would you be interested by this little tool :

http://sourceforge.net/projects/fail2ban