Categories
Linux

ssh login attack

Looking through my log reports this morning I was shocked to see lots of failed logins for users such as root, ftp, nobody, apache, operator, amanda, mysql, etc. All originated from one host, ns1.webmediaworks.net, A visit to their website explained everything..

TechTeaM OwnZ u box dollarz@bol.com.br

Unfortunately, the whois db seems to be down so I can’t even contact the webmedia site owners..

Comments

comments

By Donncha

Donncha Ó Caoimh is a software developer at Automattic and WordPress plugin developer. He posts photos at In Photos and can also be found on Google+ and Twitter.

Leave a Reply