[ILUG] Debian Woody ssh hack

[kevin lyda]

On Wed, Aug 04, 2004 at 03:09:15PM +0100, Eoin Ryan wrote:
> system binaries, as well as patching sshd itself.  Check your
> /var/log/auth.log for login attempts to either of the following user
> names: test, admin.   Part of the procedure seems to be to add one of

i see the following ip addresses:

        61.108.13.147
        61.144.167.78
        61.193.179.162
        65.194.200.129
        66.33.25.129      ns.dreamstarlets.com
        80.242.100.55
        81.8.206.35
        200.185.61.43
        202.64.173.117    ip117.bb173.pacific.net.hk
        203.227.97.1
        203.85.183.10     mail.xtrapower.net
        210.123.181.195
        210.127.243.85
        211.184.226.193
        213.173.228.92
        213.35.199.254    213-35-199-254-dsl.mus.estpak.ee
        217.58.69.2       host2-69.pool21758.interbusiness.it
        218.244.240.195
        219.120.54.178

kevin

-- 
american citizen?  register to vote: ~ florida voters - make sure you
https://register.votenet.com/LWV/    ~ haven't been struck from the
live overseas?  look here:           ~ voting lists.  check for your name
http://www.tellanamericantovote.com/ ~ here: http://tinyurl.com/2hbuj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.linux.ie/pipermail/ilug/attachments/20040804/35705fae/attachment.pgp