[ale] Hack of the month...

[Paul Cartwright]

On Wed December 14 2005 7:40 am, Christopher Fowler wrote:
> What is the attempt here and how are they attempting?
>
> Dec 14 02:58:10 209.168.246.231 authpriv.info sshd[194]: Invalid
> user testing from 68.120.97.218
> Dec 14 02:58:10 209.168.246.231 authpriv.err sshd[194]: error: Could
> not get shadow information for NOUSER
> Dec 14 02:58:10 209.168.246.231 authpriv.info sshd[194]: Failed
> password for invalid user testing from 68.120.97.218 port 59698 ssh2

arin whois: http://ws.arin.net/cgi-bin/whois.pl

shows that as an SBC user, you might want to report your logfile to :

OrgAbuseHandle: ABUSE6-ARIN
OrgAbuseName:   Abuse - Southwestern Bell Internet 
OrgAbusePhone:  +1-800-648-1626
OrgAbuseEmail:  abuse at sbcglobal.net
-- 
Paul Cartwright
Registered Linux user # 367800