[Full-disclosure] Brain dead SSH scans from Italy

2005-10-28 Thread Etaoin Shrdlu
Well, I'm stumped. I mean, really stumped. I've had a host scanning my network for the past three days, and it initially looked like one of the automated scans we've all become so familiar with (unfortunately). Naturally, the automatic defense was engaged, and I thought that would be the end of

Re: [Full-disclosure] Brain dead SSH scans from Italy

2005-10-28 Thread Jeff MacDonald
On Fri, 2005-10-28 at 08:15 -0700, Etaoin Shrdlu wrote: Well, I'm stumped. I mean, really stumped. I've had a host scanning my network for the past three days, and it initially looked like one of the automated scans we've all become so familiar with (unfortunately). Naturally, the automatic

Re: [Full-disclosure] Brain dead SSH scans from Italy

2005-10-28 Thread Etaoin Shrdlu
Etaoin Shrdlu wrote: Well, I'm stumped. I mean, really stumped. I've had a host scanning my network for the past three days... I'm at a loss. If anyone knows Italian (I don't), and can contact one of: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] or anyone at ocem.com,

Re: [Full-disclosure] Brain dead SSH scans from Italy

2005-10-28 Thread Valdis . Kletnieks
On Fri, 28 Oct 2005 13:14:31 PDT, Etaoin Shrdlu said: always least understand, i.e. the tries for root's password. I mean, really, are there that many hosts out there with root accounts that can be guessed with an automated password guesser? You're new here, aren't you? :) pgpzksyA7Oqna.pgp

Re: [Full-disclosure] Brain dead SSH scans from Italy

2005-10-28 Thread Vania Martino Toma
Etaoin Shrdlu wrote: Well, I'm stumped. I mean, really stumped. I've had a host scanning my network for the past three days, and it initially looked like one of the automated scans we've all become so familiar with (unfortunately). Naturally, the automatic defense was engaged, and I thought that

Re: [Full-disclosure] Brain dead SSH scans from Italy

2005-10-28 Thread Nick FitzGerald
Etaoin Shrdlu wrote: snip Thanks to whomever finally got through, however you did it. I had actually allowed one host to start responding, and it had gotten to the part I always least understand, i.e. the tries for root's password. I mean, really, are there that many hosts out there with root