Hack attempts

[Thomas Sapp]

On Sat, 2004-07-24 at 06:28, Edwin Dicker wrote:
> The last two days i got bugged by someone from korea and someone from japan.
> his is what i find in my LogWatch :
> --------------------- SSHD Begin ------------------------ 
> 
> 
> Failed logins from these:
>    guest/password from ::ffff:211.119.136.170: 1 Time(s)
>    test/password from ::ffff:211.119.136.170: 1 Time(s)
> 
> Illegal users from these:
>    guest/none from ::ffff:211.119.136.170: 1 Time(s)
>    guest/password from ::ffff:211.119.136.170: 1 Time(s)
>    test/none from ::ffff:211.119.136.170: 1 Time(s)
>    test/password from ::ffff:211.119.136.170: 1 Time(s)
> 
> is this a known hack attempt by some sort of program ? because for both
> tries the same usernames have been tried to use : guest and test
> 
> cheers
> Edwin
I have seen a lot of this lately too.  I've just started blocking each
individual IP address as it comes up so they can't try again.
-- 
Thanks,
Tom Sapp
http://www.sappsworld.com