[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Cron <builder@developer> nice $HOME/src/skolelinuxcvs/skolelinux/src/cronjobs/update-sarge-apt.sh > /dev/null ; nice make -s -C $HOME/src/debian-edu/src/build/CD check-and-build



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 26-04-2005 09:23, Finn-Arne Johansen wrote:
> Cron Daemon wrote:
> 
>> Mime-Version: 1.0
>> Content-Type: text/plain; charset=iso-8859-1Permission denied, please
>> try again.
>> Permission denied, please try again.
>> Received disconnect from 217.196.43.131: 2: Too many authentication
>> failures for de-build-guest
>> svn: Connection closed unexpectedly
>> Permission denied, please try again.
>> Permission denied, please try again.
>> Received disconnect from 217.196.43.131: 2: Too many authentication
>> failures for de-build-guest
>> svn: Connection closed unexpectedly
>>
>> _______________________________________________
>> commits mailing list
>> commits@skolelinux.no
>> https://init.linpro.no/mailman/skolelinux.no/listinfo/commits
> 
> 
> Anyone who knows what these messages is about ?
> 
> The message comes almost every morning, And since there is a warning
> about to many authentication failures, I guess either something is wrong
> in the script, or we have someone that tries to log in on svn.debian.org
> using our automated build account. I dont like neither.

I noticed yesterday in another thread that "svn+ssh" was the access
method used. If that means it is plain SSH on port 22 then it most
probably is script-kiddies. I get quite frequent systematic login
attempts through SSH to "root", "admin", "www" and a load of plain
usernames.

Install logcheck if you want a better feeling of what is going on.


 - Jonas

- --
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

 - Enden er nær: http://www.shibumi.org/eoti.htm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCbfBUn7DbMsAkQLgRAmtJAJ95NG4OuF7uwohuleDnodFtveJCAgCcCCcg
Ft82JNjhYnrt/6Ox7m+QPLQ=
=QFoE
-----END PGP SIGNATURE-----



Reply to: