Also see the DShield "Are you cracked?" frob: http://www.dshield.org/warning_explanation.php - ferg -- "Stephen J. Wilcox" <steve@telecomplete.co.uk> wrote: ahh then you have one of the new wormy things that scans aggressively for easy accounts on ssh. find src host and disinfect. Steve On Fri, 1 Oct 2004, Jack Vizelter wrote:

Investigation is still ongoing, but from what they can tell, majority of the attempted connections have been going over TCP port 22.

-jack

-- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg@netzero.net or fergdawg@sbcglobal.net