[Gllug] Non-existent user in /var/log/secure

gvimrc gvimrc at googlemail.com
Wed Jun 24 13:48:10 UTC 2009


Peter Corlett wrote:
> On Wed, Jun 24, 2009 at 02:14:06PM +0100, gvimrc wrote:
> 
> That looks awfully like you're being ssh scanned by a worm. Apart from the
> light bandwidth drain and filling your logs, it's harmless provided you have
> strong passwords on all of your accounts.
> 

SSH is running on a non-standard port on this machine. Dovecot offers POP3 but I've firewalled it to limit access from a handful of IPs.

gvim

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list