Re: [gentoo-user] Usernames in ssh attacks

2009-03-20 Thread Eric Martin
Paul Hartman wrote: > On Fri, Mar 20, 2009 at 7:25 AM, Eric Martin wrote: >> Paul Hartman wrote: >>> On Thu, Mar 19, 2009 at 10:36 AM, Johan Blåbäck >>> wrote: I've always had usernames when it comes to sshd's log entries in auth.log, like the following: sshd[5926]: error: P

Re: [gentoo-user] Usernames in ssh attacks

2009-03-20 Thread Paul Hartman
On Fri, Mar 20, 2009 at 7:25 AM, Eric Martin wrote: > Paul Hartman wrote: >> On Thu, Mar 19, 2009 at 10:36 AM, Johan Blåbäck >> wrote: >>> I've always had usernames when it comes to sshd's log entries in >>> auth.log, like the following: >>> >>> sshd[5926]: error: PAM: Authentication failure fo

Re: [gentoo-user] Usernames in ssh attacks

2009-03-20 Thread Eric Martin
Paul Hartman wrote: > On Thu, Mar 19, 2009 at 10:36 AM, Johan Blåbäck > wrote: >> I've always had usernames when it comes to sshd's log entries in >> auth.log, like the following: >> >> sshd[5926]: error: PAM: Authentication failure for >> from > > Well, I don't use PAM, just key-based authen

RE: [gentoo-user] Usernames in ssh attacks

2009-03-19 Thread Adam Carter
> In my ssh logs this morning I noticed a couple login attempts with > usenames on them... I've never seen that before. It is usually just an > IP address. > > Mar 18 20:19:48 [sshd] refused connect from > postmas...@dns.cablecentro.net.co > Mar 18 23:42:44 [sshd] refused connect from 211.116.136.1

Re: [gentoo-user] Usernames in ssh attacks

2009-03-19 Thread Michael Higgins
On Thu, 19 Mar 2009 10:43:13 -0500 Paul Hartman wrote: > On Thu, Mar 19, 2009 at 10:36 AM, Johan Blåbäck > wrote: > > I've always had usernames when it comes to sshd's log entries in > > auth.log, like the following: > > > > sshd[5926]: error: PAM: Authentication failure for > > from > > We

Re: [gentoo-user] Usernames in ssh attacks

2009-03-19 Thread Paul Hartman
On Thu, Mar 19, 2009 at 10:36 AM, Johan Blåbäck wrote: > I've always had usernames when it comes to sshd's log entries in > auth.log, like the following: > > sshd[5926]: error: PAM: Authentication failure for > from Well, I don't use PAM, just key-based authentication only, so I always see on

Re: [gentoo-user] Usernames in ssh attacks

2009-03-19 Thread Johan Blåbäck
I've always had usernames when it comes to sshd's log entries in auth.log, like the following: sshd[5926]: error: PAM: Authentication failure for from On 3/19/09, Paul Hartman wrote: > In my ssh logs this morning I noticed a couple login attempts with > usenames on them... I've never seen t

[gentoo-user] Usernames in ssh attacks

2009-03-19 Thread Paul Hartman
In my ssh logs this morning I noticed a couple login attempts with usenames on them... I've never seen that before. It is usually just an IP address. Mar 18 20:19:48 [sshd] refused connect from postmas...@dns.cablecentro.net.co Mar 18 23:42:44 [sshd] refused connect from 211.116.136.107 Mar 18 23: