25 Aug
2009
25 Aug
'09
6:31 p.m.
Yes... dumb question! Sorry.
Forgot that, in lsof, this is a connection from (and not *to*) 119.1.193.205
One more SSH brute force attack.
Thanks, Manuel
Manuel Monteiro wrote:
Hello,
sshd 3638 root 3u IPv6 17317 TCP pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED)
sshd 3639 sshd 3u IPv6 17317 TCP pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED)
Looks like an ssh connection from 119.1.193.205 port 2103 (defined as "zephyr-clt" in /etc/services).
--
Bowie
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos