SecurityFocus

FW: [Intrusions] Linux SSH scanning - test/guest Jul 30 2004 11:22AM
M Shirk (shirkdog_linux hotmail com) (1 replies)

Re: FW: [Intrusions] Linux SSH scanning - test/guest Sep 08 2004 12:51AM
Sebastian Jaenicke (sjaenick TechFak Uni-Bielefeld DE) (1 replies)

Re: FW: [Intrusions] Linux SSH scanning - test/guest Sep 12 2004 02:50PM
Sebastian Jaenicke (sjaenick TechFak Uni-Bielefeld DE) (1 replies)

Hi,

On Wed, Sep 08, 2004 at 02:51:52AM +0200, Sebastian Jaenicke wrote:
> I just setup an account "guest" with password "guest" and a shell modified
> to log commands via syslog[0].

Addendum: Later, the attacker returned and installed an IRC bouncer;
I couldn't resist, joined IRC and talked to him (from another host).

Complete list of commands, files and IRC log here:

http://www.jaenicke.org/sk/

- Sebastian

--
Sebastian Jaenicke Disce aut discede!
whois pgpkey-C81115B1 -h whois.ripe.net|perl -ne's-^certif: *--&&print'

[ reply ]

Re: FW: [Intrusions] Linux SSH scanning - test/guest Sep 13 2004 04:40PM
Christine Kronberg (Christine_Kronberg genua de)