failed password for "root" in logs

From: Mr.Jason (jaakkochanREMOVETHIS_at_surfeu.fi)
Date: 05/29/05

  • Next message: Bit Twister: "Re: failed password for "root" in logs" 
    Date: Sun, 29 May 2005 21:04:41 +0300

    I get NUMEROUS amounts of "failed password for root" messages in my www
    servers logfile. So I think someone is trying to connect to it via SSH and
    trying different passwords and its not surely me.
    My password is such they cant guess but I'm still little worried. If not
    else, then the size of my logfile!

    But there's nothing I can do, maybe, except disable SSH but I dont want to
    do that..

    -----
    Check out the New Album
    http://cutout.ath.cx
    Listen my music at
    http://www.rocketradio.com/mrjason
    Get my previous CD East End
    http://www.cdbaby.com/mrjason

  • Next message: Bit Twister: "Re: failed password for "root" in logs"

    Relevant Pages

    • RE: Linux hacked
      ... Also, what exactly did the history file show, can you paste it into a mail ... > First let me say I'm a security novice. ... > been unsuccessful in getting root back. ... > via ssh but you could su in once logged in as one of three users. ...
      (Security-Basics)
    • Re: Linux hacked
      ... To find out what kernel version you are running, type "uname -a" without ... > been unsuccessful in getting root back. ... > via ssh but you could su in once logged in as one of three users. ...
      (Security-Basics)
    • RE: Linux hacked
      ... hack the box, pull the drive and save it. ... Use the newest versions of Gentoo, Apache, SSH, PHP and Squirl Mail. ... been unsuccessful in getting root back. ... I found a hidden directory /var/tmp/.tmp that has a bunch of directories ...
      (Security-Basics)
    • RE: Linux hacked
      ... Was any of the sites running a php nuke or another portal or system that is vuln ... been able to use that with a locla root exploit to gain root on the machine. ... > hack the box, pull the drive and save it. ... > Use the newest versions of Gentoo, Apache, SSH, PHP and Squirl Mail. ...
      (Security-Basics)
    • Re: X11Forwarding, ssh -X, and /bin/su
      ... ]>but I'm not really tunneled using ssh then, ... ]connecting to the X server and have the home directory NFS-mounted ... ](unless you leave root unmapped over NFS, ... ]root-readable place and set the environment $XAUTHORITY variable ...
      (comp.security.ssh)