is this an intruder?

[Michael D. Berger]

I get such an attacks with irregular frequency, averaging
about one attack per day.  The longest attack  that I
measured ran for over an hour and tried more that 1100 user
names.  They are rarely, if ever, from the same ip address.

Mike.

--
Michael D. Berger
m.d.berger at ieee.org 

> -----Original Message-----
> From: redhat-list-bounces at redhat.com 
> [mailto:redhat-list-bounces at redhat.com] On Behalf Of Marty Landman
> Sent: Wednesday, January 04, 2006 1:04 PM
> To: redhat-list at redhat.com
> Subject: is this an intruder?
> 
> 
> Here's what I'm seeing on /var/log/messages:
> 
[...]

> 
> Not sure if I'm reading this right as this is new to me but 
> it appears 
> someone in Denmark spent about 10 minutes trying a variety of 
> userid's to 
> start an ssh session on my network gateway.
> 
> 
> Marty
> 
> 
> Marty Landman, Face 2 Interface Inc. 845-679-9387
> Webmaster's Bulletin Board: http://bbs.face2interface.com/
> Web Installed Formmail: http://face2interface.com/formINSTal  
> 
> -- 
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
>