[lug] Something bad???-UPDATE!
Scott A. Herod
herod at interact-tv.com
Tue Jan 9 14:47:58 MST 2001
May not be your SSHD though. I've seen a couple of reports of
sshd based trojans. Verify that you have the original versions
of ls, ps, netstat and lsof ( they are replaced in the attacks
that I've seen ) and check you system. Also, look at
Shannon Johnston wrote:
> Sorry, I forgot to mention that it's SSHD producing this message.
> > I've had this message run through my log file. What's going on here
> > >> Faking authloop for illegal user <user> from <IPADDR> port 61478
> > Anybody know?
> > Thanks,
> > Shannon Johnston
More information about the LUG