ssh2

[Aldo Foot]

On Wed, Sep 24, 2008 at 11:00 AM, roland <roland at cat.be> wrote:
>>
> I was not clear enough,
> I did changed the password for root and I blocked remote root login.
> Now he is still trying to login with root, but unsuccessfully. So probably
> he did not finished his job.
>
> roland

It was not clear to me whether you or the attacker had changed the root
password.
This guy's got your number and will keep coming.
I would have pull the plug on that system long ago.
There's nothing else really to do about this. I wish you luck with that system.


~af