Educause Security Discussion mailing list archives
Re: 7 new ssh scanners
From: Lois Lehman <LOIS.LEHMAN () ASU EDU>
Date: Fri, 27 Aug 2004 12:29:03 -0700
New one from today: Aug 27 02:22:24 atap sshd[2308]: Illegal user test from 210.92.110.56 Aug 27 02:22:26 atap sshd[2310]: Illegal user guest from 210.92.110.56 Aug 27 02:22:28 atap sshd[2312]: Illegal user admin from 210.92.110.56 Aug 27 02:22:30 atap sshd[2314]: Illegal user admin from 210.92.110.56 Aug 27 02:22:32 atap sshd[2316]: Illegal user user from 210.92.110.56 Aug 27 02:22:36 atap sshd[2318]: Failed password for root from 210.92.110.56 por t 46732 ssh2 Aug 27 02:22:41 atap sshd[2320]: Failed password for root from 210.92.110.56 por t 47076 ssh2 Aug 27 02:22:45 atap sshd[2322]: Failed password for root from 210.92.110.56 por t 47411 ssh2 Aug 27 02:22:47 atap sshd[2324]: Illegal user test from 210.92.110.56 Lois Lehman College Network Security Manager Physical Sciences Computer Support Manager College of Liberal Arts & Sciences Arizona State University 480-965-3139 -----Original Message----- From: The EDUCAUSE Security Discussion Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Doug Pearson Sent: Wednesday, August 25, 2004 7:01 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] 7 new ssh scanners Newly reported ssh scanners: ASN | IP | Name 812 | 69.196.234.102 | ROCB Rogers Cable Inc. 2546 | 143.233.244.4 | NCSR DEMOKRITOS 4538 | 202.199.242.50 | ERX-CERNET-BKB China Education 4766 | 211.105.46.30 | KIXS-AS-KR Korea Telecom 4766 | 221.147.57.23 | KIXS-AS-KR Korea Telecom 4808 | 202.108.159.211 | CHINA169-BJ CNCGROUP IP netwo 7132 | 207.215.15.252 | SIS-80 SBC Internet Services ----- Prior reports: reported 8/25 ~01:45 GMT ASN | IP | Name 269 | 203.186.94.87 | CTIHK-AS-AP City Telecom (H.K. 1659 | 140.130.177.203 | ERX-TANET-ASN1 Tiawan Academic 9304 | 210.0.186.83 | HUTCHISON-AS-AP Hutchison Glob reported 8/25 ~13:57 GMT: ASN | IP | Name 680 | 131.234.36.44 | DFN-IP service G-WiN 680 | 141.35.26.179 | DFN-IP service G-WiN 1998 | 64.8.171.6 | SOMN State of Minnesota 2706 | 202.64.162.11 | HKSUPER-HK-AP Pacific Supernet 3208 | 193.194.70.82 | ARN Algerian NREN Network 3208 | 193.194.80.194 | ARN Algerian NREN Network 3269 | 81.74.237.46 | ASN-IBSNAZ TELECOM ITALIA 3462 | 61.222.148.235 | HINET Data Communication Busin 3786 | 211.169.202.41 | ERX-DACOMNET DACOM Corporation 4766 | 203.251.69.201 | KIXS-AS-KR Korea Telecom 4766 | 210.223.178.180 | KIXS-AS-KR Korea Telecom 6539 | 66.201.250.3 | GTGR GT Group Telecom Services 7132 | 64.165.154.9 | SIS-80 SBC Internet Services 7132 | 68.122.247.235 | SIS-80 SBC Internet Services 8151 | 200.33.20.234 | Uninet S.A. de C.V. 8220 | 62.96.16.14 | COLT COLT Telecommunications - 8732 | 62.117.99.83 | COMCOR-AS AS for Moscow Teleco 9488 | 147.46.76.222 | SNU-AS-KR Seoul National Unive 9929 | 210.52.66.56 | CNCNET-CN China Netcom Corp. 10160 | 61.251.165.151 | PRISM-AS Intellicenter 10790 | 209.209.9.65 | INREA InReach Internet 11172 | 200.76.49.243 | Alestra 11509 | 208.179.153.149 | TIERZ Tierzero 11562 | 200.75.146.149 | Net Uno, C.A. 12006 | 216.57.26.222 | ELNK eLink Communications INC. 12874 | 83.103.27.66 | FASTWEB Fastweb Autonomous Sys 13237 | 217.11.63.19 | LAMBDANET-AS European Backbone 13237 | 217.13.198.2 | LAMBDANET-AS European Backbone 13601 | 64.239.5.115 | INTD Interland 13726 | 209.176.248.240 | VSIS Vision I Systems, Inc. 13749 | 64.246.40.105 | EVRY Everyones Internet, Inc. 14900 | 66.255.150.10 | USLC USLEC Corp. 21155 | 81.4.75.96 | ASN-PROSERVE ProServe B.V. Net 23980 | 165.229.193.163 | YOUNGNAM-UNIV-AS-AP YOUNGNAM U 24961 | 62.141.36.49 | FASTIT-AS fast IT GmbH, Duesse 25446 | 213.183.107.133 | ASN-TOMLINE TomTrunk, ISP in T 29863 | 65.38.161.50 | DATA3 Data393 Inc. --- Doug Pearson dodpears () indiana edu Research and Education Networking ISAC 24x7 Watch Desk: ren-isac () iu edu, +1(327)278-6630 ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/cg/. ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/cg/.
Current thread:
- 7 new ssh scanners Doug Pearson (Aug 25)
- <Possible follow-ups>
- Re: 7 new ssh scanners Justin Azoff (Aug 26)
- Re: 7 new ssh scanners Lois Lehman (Aug 27)