[PLUG] ssh attack storm/
Paul Heinlein
heinlein at madboa.com
Mon Oct 22 18:35:26 UTC 2007
On Mon, 22 Oct 2007, Kurt Sussman wrote:
> Is anyone else seeing a ton of ssh attacks? I've gotten 2500 login
> attempts (I'm not counting the 37 connections that sent no
> identification) in the last 24 hours. That's over 10 times the
> 'normal' attack level for this box.
Yeah. I'm seeing a LOT of failed attempts for user 'mysql'; I wonder
if some distro or app installed MySQL in a way that renders its user
account open for easy logins?
--
Paul Heinlein <> heinlein at madboa.com <> http://www.madboa.com/
More information about the PLUG
mailing list