This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

suspicious log entries

On my ASG220 v6.102 , under Local Logs/ SSH daemon/ SSH daemon live log it shows the following.

2005:12:08-12:23:53 (none) sshd[27115]: Illegal user simona from 59.42.52.210
2005:12:08-12:23:53 (none) sshd[27115]: error: Could not get shadow information for NOUSER
2005:12:08-12:23:53 (none) sshd[27115]: Failed password for illegal user simona from 59.42.52.210 port 13903 ssh2

Is this someones attempt to login using a name dictionary or something?

This thread was automatically locked due to age.

Parents

0 BarryG over 19 years ago

Usually.

You can restrict what networks can access the ssh access in the webmin (first section).

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 19 years ago

Usually.

You can restrict what networks can access the ssh access in the webmin (first section).

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 doug_p over 19 years ago in reply to BarryG

If you have a router between ASL and the internet you could also block SSH there.
Cancel
Vote Up 0 Vote Down

Cancel