Profile cover photo
Profile photo
Connor Janowiak
47 followers
47 followers
About
Connor's posts

So, was looking around in my system log files on my server, and saw that there was a brute force ssh login attack on my machine sunday. Some of the logins were expected:

oracle
test
shelluser
user
webadmin
webmaster
guest
admin
apache

Some of them were just amusing:

tony
david
danny
alex
angle
party
amanda
harrypotter
zzz
frank
snort
gnats
wicked
fabio

Check your log files if you run a server! I'm on OSX, and found these in /var/log/secure.log, all with "invalid user" errors.

Those all came from Beijing on Sunday. Along with ssh scans and attacks from Moscow, New Delhi, Antigua, Netherlands, Maanshan, and Brisbane. All in the last couple of days.

I looked back in the logs, and haven't seen any successful logins that aren't mine. Yet. O.o
Wait while more posts are being loaded