[Gllug] limiting ssh zombie login attempts

Richard Jones rich at annexia.org
Tue Oct 19 09:39:36 UTC 2004


On Tue, Oct 19, 2004 at 10:08:57AM +0100, Dean wrote:
> On Tue, Oct 19, 2004 at 10:00:52AM +0100, Richard Jones wrote:
> > Needless to say, I went home pretty sharpish afterwards, changed my
> > firewall password, and examined the logs very closely.
> 
> Did you see any attempts?

No ... or at least they managed to install a very subtle rootkit in
the 30 minutes or so that the password might have been sniffed ...

I might as well name and shame the Internet cafe in question too: it's
the one opposite the Bull and Gate pub in Kentish Town.

Rich.

-- 
Richard Jones. http://www.annexia.org/ http://www.j-london.com/
Merjis Ltd. http://www.merjis.com/ - improving website return on investment
If I have not seen as far as others, it is because I have been
standing in the footprints of giants.  -- from Usenet
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: Digital signature
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20041019/04a93462/attachment.pgp>
-------------- next part --------------
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug


More information about the GLLUG mailing list