On Thursday 31 March 2005 02:55 am, Frederic Guillet wrote: > MAR 30 20:01:33 servername sshd[17890] illegal user john from > 24.15.134.130 > > I have about 500 attemps with different usernames and the same IP > so i guess it is a robot which is trying to enter my system. > > the pb with such log is that it does not say if the user has > succeeded to enter the machine or if the attempt has failed. It means it failed. I've got lots of those logged. http://ursine.ca/Category:Online_lusers -- Paul Johnson Email and Instant Messenger (Jabber): baloo@ursine.ca http://ursine.ca/~baloo/
Attachment:
pgpHxe5_0uBFW.pgp
Description: PGP signature