MORE SSH Hacking: heads-up

[Yang Xiao]

On Wed, 4 Aug 2004 10:47:01 -0400, Yang Xiao <yxiao2004 at gmail.com> wrote:
> 
> 
> On Wed, 4 Aug 2004 10:25:05 -0400, jeem machine <jmachine at gmail.com> wrote:
> > On Wed, 04 Aug 2004 08:25:36 -0500, Steven Stern
> >
> >
> > <subscribed-lists at sterndata.com> wrote:
> > > On Tue, 03 Aug 2004 21:40:18 -0700, Ow Mun Heng <Ow.Mun.Heng at wdc.com> wrote:
> > >
> > > My logs from last night:
> > >
> > > Failed logins from these:
> > >    guest/password from ::ffff:143.107.235.116: 1 Time(s)
> > >    guest/password from ::ffff:211.105.46.30: 1 Time(s)
> > >    test/password from ::ffff:143.107.235.116: 1 Time(s)
> > >    test/password from ::ffff:211.105.46.30: 1 Time(s)
> > >
> > > Illegal users from these:
> > >    guest/none from ::ffff:143.107.235.116: 1 Time(s)
> > >    guest/none from ::ffff:211.105.46.30: 1 Time(s)
> > >    guest/password from ::ffff:143.107.235.116: 1 Time(s)
> > >    guest/password from ::ffff:211.105.46.30: 1 Time(s)
> > >    test/none from ::ffff:143.107.235.116: 1 Time(s)
> > >    test/none from ::ffff:211.105.46.30: 1 Time(s)
> > >    test/password from ::ffff:143.107.235.116: 1 Time(s)
> > >    test/password from ::ffff:211.105.46.30: 1 Time(s)
> > >
> > > --
> > >    Steve
> > >
> > >
> > >
> > >
> > > --
> > > fedora-list mailing list
> > > fedora-list at redhat.com
> > > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
> > >
> > Which logs are you looking at. I would like to check my system
> > Thanks
> > Jeem
> >
> >
> >
> > 
> I think you guys are just too excited to see those attempts, "wow,
> somebody is trying to hack my system!", let me know if they broke in,
> then I will be excited as well.
> 
> Yang
> 
coming from covad

Aug  3 16:55:06 www sshd[5278]: Failed password for test from
67.101.243.147 port 3185 ssh2
Aug  3 16:55:07 www sshd[5283]: Illegal user guest from 67.101.243.147
Aug  3 16:55:10 www sshd[5283]: Failed password for illegal user guest
from 67.101.243.147 port 3400 ssh2
Aug  3 16:55:11 www sshd[5287]: Illegal user admin from 67.101.243.147
Aug  3 16:55:14 www sshd[5287]: Failed password for illegal user admin
from 67.101.243.147 port 3578 ssh2
Aug  3 16:55:15 www sshd[5292]: Illegal user admin from 67.101.243.147
Aug  3 16:55:17 www sshd[5292]: Failed password for illegal user admin
from 67.101.243.147 port 3753 ssh2
Aug  3 16:55:19 www sshd[5297]: Illegal user user from 67.101.243.147

looks like a worm.