Security Incidents mailing list archives

Re: More ssh attempts

From: gabriel rosenkoetter <gr () eclipsed net>
Date: Thu, 22 Nov 2001 14:30:56 -0500

On Thu, Nov 22, 2001 at 11:24:43AM +0200, Marco Slaviero wrote:

The user has restricted (sftp, and a change passwd script) access to the box.
It does not seem to be the crc32 attack. The user logged on about 136 time in
an hour, and disconnected almost immediately. Anyone seen this before?


You've ruled out broken client software on the user's end, I trust?

-- 
       ~ g r @ eclipsed.net

Attachment: _bin
Description:

Current thread:

MSLV.exe Rob Keown (Nov 21)
- <Possible follow-ups>
- RE: MSLV.exe Rob Keown (Nov 21)
  - More ssh attempts Marco Slaviero (Nov 22)
    - Re: More ssh attempts gabriel rosenkoetter (Nov 22)
    - Re: More ssh attempts Homer Wilson Smith (Nov 22)
    - Re: More ssh attempts Marco Slaviero (Nov 23)