[LUNI] Has anyone else noticed this?

[Mike Scott]

I used to do that as well, but the firewall where I work is pretty
restrictive and I don't control it.
So I'm pretty much stuck with well-known ports.  I even tried using a
different port that was open in the firewall (i.e. port 80 for SSH
since I don't have a web server) but that got blocked by our firewall
as well.

Like I said, there are usually only a half-dozen or so attempts per day,
and the addresses are in groups of 3-4, but these are just hammering
away.  Which got me wondering if there was some new attack vector on
the loose.

- Mike Scott


> -------- Original Message --------
> Subject: Re: [LUNI] Has anyone else noticed this?
> From: Scott Zionic <zionics at crankynerd.com>
> Date: Thu, January 04, 2007 12:53 pm
> To: Linux Users Of Northern Illinois - Technical Discussion
> <luni at luni.org>
> 
> Mike Scott wrote:
> > This is the second time this week I've seen this kind of activity and
> > both times the IP is coming from somewhere in Asia.  I usually get
> > these attempts in bursts of 2-4, but the quantity of attempts caught my
> > eye.
> 
> I used to get break-in attempts all the time. I moved my sshd port and 
> haven't seen a single attempt since.
> 
> Scott
> -- 
> Linux Users Of Northern Illinois - Technical Discussion 
> http://luni.org/mailman/listinfo/luni