[LUNI] Has anyone else noticed this?

[Mike Scott]

This is the second time this week I've seen this kind of activity and
both times the IP is coming from somewhere in Asia.  I usually get
these attempts in bursts of 2-4, but the quantity of attempts caught my
eye.

This is a box that I have set up with external SSH access and I use
allow/deny to block out all except my work address, so I'm not too
worried.  Just wondered if anyone else has gotten this.

- Mike Scott


> -------- Original Message --------
> Subject: LogWatch for prideth.pyewacket.net
> From: root <root at prideth.pyewacket.net>
> Date: Thu, January 04, 2007 4:02 am
> To: mscott at pyewacket.org
> 
> ################## LogWatch 2.6 Begin ##################### 
> 
>  --------------------- sendmail Begin ------------------------ 
> 
> 10403 bytes transferred
> 3 messages sent
>  ---------------------- sendmail End ------------------------- 
> 
> 
>  --------------------- SSHD Begin ------------------------ 
> 
> **Unmatched Entries**
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 125.248.86.5 (125.248.86.5)
> refused connect from 219.101.39.218 (219.101.39.218)
> refused connect from 219.101.39.218 (219.101.39.218)
> 
> 
>  ---------------------- SSHD End ------------------------- 
> 
> 
> 
>  ###################### LogWatch End #########################