On 03/08/11 11:47 AM, m.roth at 5-cent.us wrote: > > Yup. Last time I saw a story about someone hanging an unprotected Windows > box on the 'Net, late last year, I think, it was down from 12 min to 5 min > before it was attacked. and how long after you connect a 'nix box before worms start port knocking on ssh trying stupid combinations of user/pass over and over? I see a couple 1000 of those a day Mar 8 11:41:25 freescruz sshd[28012]: Failed password for daemon from 200.201.20.21 port 49462 ssh2 Mar 8 11:41:29 freescruz sshd[28026]: Failed password for adm from 200.201.20.21 port 49869 ssh2 Mar 8 11:41:32 freescruz sshd[28038]: Failed password for invalid user quark from 200.201.20.21 port 50352 ssh2 Mar 8 11:41:36 freescruz sshd[28048]: Failed password for invalid user sys from 200.201.20.21 port 50811 ssh2 Mar 8 11:41:40 freescruz sshd[28055]: Failed password for invalid user liyiduo from 200.201.20.21 port 50984 ssh2 Mar 8 11:41:44 freescruz sshd[28061]: Failed password for games from 200.201.20.21 port 51438 ssh2 Mar 8 11:41:47 freescruz sshd[28071]: Failed password for mailnull from 200.201.20.21 port 51927 ssh2 Mar 8 11:41:52 freescruz sshd[28086]: Failed password for invalid user backup from 200.201.20.21 port 52095 ssh2 Mar 8 11:41:55 freescruz sshd[28094]: Failed password for sync from 200.201.20.21 port 52604 ssh2 Mar 8 11:41:59 freescruz sshd[28103]: Failed password for shutdown from 200.201.20.21 port 53016 ssh2 Mar 8 11:42:03 freescruz sshd[28112]: Failed password for invalid user libuuid from 200.201.20.21 port 53504 ssh2 Mar 8 11:42:07 freescruz sshd[28145]: Failed password for invalid user liudongfeng from 200.201.20.21 port 53999 ssh2 Mar 8 11:42:10 freescruz sshd[28150]: Failed password for invalid user aaa from 200.201.20.21 port 54177 ssh2 Mar 8 11:42:14 freescruz sshd[28160]: Failed password for invalid user puxiaolong from 200.201.20.21 port 54585 ssh2 Mar 8 11:42:18 freescruz sshd[28167]: Failed password for invalid user yuzhakov from 200.201.20.21 port 55084 ssh2 Mar 8 11:42:22 freescruz sshd[28175]: Failed password for invalid user Debian-exim from 200.201.20.21 port 55590 ssh2 Mar 8 11:42:25 freescruz sshd[28183]: Failed password for invalid user irc from 200.201.20.21 port 55788 ssh2 Mar 8 11:42:29 freescruz sshd[28190]: Failed password for invalid user home3 from 200.201.20.21 port 56182 ssh2 Mar 8 11:42:33 freescruz sshd[28194]: Failed password for invalid user messagebus from 200.201.20.21 port 32824 ssh2 Mar 8 11:42:37 freescruz sshd[28203]: Failed password for invalid user netdump from 200.201.20.21 port 33315 ssh2