Re: sshd bruteforce from 66.246.72.184
Pehr Söderman <[email protected]> Mon, 21 Feb 2005 11:19:22 +0100
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
If I am reading this log correctly you have some pretty obvious account names. It might be a good idea to look over your servers and remove accounts such as root and admin and replace them with dummy accounts. The security gain might be small, but it stops password guessing and makes it somewhat harder for an attacker if he penetrates one of your systems. -- /Pehr Söderman [email protected] Student of Computer Science Royal Institute of Technology, Stockholm, Sweden Erasmus student at Universität Karlsruhe, Germany Cum catapultae proscriptae erunt tum soli proscript catapultas habebunt. _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions