Pinoy Admins, Thanks so much for your help guys. The DSL connection is mine. The Canadian connection scared me. The server I operate is a web server. I can't just firewall everything, but any of your future suggestions will help. Thanks :) -Edwin- On Tue, Jul 31, 2001 at 04:50:34PM +0800, louiemiranda wrote: > he scanned u and trying to get in on your ssh daemon. :) Take a closer look. There are two distinct incidents in his logs, originating from two completely unrelated IP addresses (PSInet Canada and PLDT ADSL). The canadian script kiddie was trying to see if he had an open proxy to use (which of course fails because our friend is not even running a proxy...portsentry picked it up of course and tossed the poor idiot into the can). The philippine one was attempting to perform a password guessing attack on the ssh daemon. They're even a couple of hours apart. _ Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph To leave: send "unsubscribe" in the body to [EMAIL PROTECTED] To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED]
