[PLUG] ssh attack storm/

alan alan at clueserver.org
Mon Oct 22 18:43:38 UTC 2007


On Mon, 22 Oct 2007, Paul Heinlein wrote:

> On Mon, 22 Oct 2007, Kurt Sussman wrote:
>
>> Is anyone else seeing a ton of ssh attacks? I've gotten 2500 login
>> attempts (I'm not counting the 37 connections that sent no
>> identification) in the last 24 hours. That's over 10 times the
>> 'normal' attack level for this box.
>
> Yeah. I'm seeing a LOT of failed attempts for user 'mysql'; I wonder
> if some distro or app installed MySQL in a way that renders its user
> account open for easy logins?

Plesk uses the same password for root and mysql admin by default.

-- 
Q: Why do programmers confuse Halloween and Christmas?
A: Because OCT 31 == DEC 25.



More information about the PLUG mailing list