Re: MASSIVE ssh attack attempt

[david () PANANIX COM (David A. Bandel)]

Aren't those some of the compromised hosts from the DDoS attack?
Apparently, they're still not fixed.

Ciao,

David A. Bandel

--
Focus on the dream, not the competition.
                -- Nemesis Racing Team motto

Robert Lau wrote:
> Similar scan here.  They're going through our hosts in alphabetical
> order.  Contacting linkline.com.  All times PST.
>
>   YYYYMMDD hhmmss
>   20000215 193224 ain.usc.edu sshd[6775]: refused connect from
> dsl-cvd-ds11047-2.linkline.com
>   20000215 193224 ain.usc.edu sshd[6776]: refused connect from
> dsl-cvd-ds11047-2.linkline.com
>   20000215 193739 alpha.usc.edu sshd[12224]: refused connect from
> dsl-cvd-ds11047-2.linkline.com
>   20000215 193739 alpha.usc.edu sshd[12223]: refused connect from
> dsl-cvd-ds11047-2.linkline.com
>   ...
>   20000216 130402 tobor.usc.edu sshd[19308]: refused connect from
> dsl-cvd-ds11047-2.linkline.com
>   20000216 130402 tobor.usc.edu sshd[19309]: refused connect from
> dsl-cvd-ds11047-2.linkline.com
>   20000216 130434 topaz.usc.edu sshd[29650]: refused connect from
> dsl-cvd-ds11047-2.linkline.com
>   20000216 130434 topaz.usc.edu sshd[29651]: refused connect from
> dsl-cvd-ds11047-2.linkline.com
>
> Robert Lau
> Information Services Division - Core Services
> University of Southern California