[geeks] ssh attacks

Thomas Gallaway rescue at port11.net
Wed Aug 11 11:15:02 CDT 2004


Eric Dittman wrote:

>>>Lately, i've been getting several ssh login attempts to accounts
>>>user, admin and test.  Mostly from European and Asian countries.
>>>Is there some type of automated worm out there trying to exploit
>>>an ssh vulnerability?
>>>Anyone else getting this crap?
>>>      
>>>
>>I'm getting a ton of these as well.  user / admin / test / guest.
>>    
>>
>
>I'm seeing them, too
>  
>
So is that an attack or just probes :-)

Btw I get plenty of those. Booring. I guess they are looking for default 
cisco or other devices that use those kind of logins?
I guess I'll put a decoy box and see what they are really trying to do.



More information about the geeks mailing list