Help answer threads with 0 replies.
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 09-19-2004, 06:53 PM   #1
LQ Newbie
Registered: Sep 2004
Distribution: Red Hat Enterprise Linux ver 3
Posts: 1

Rep: Reputation: 0
Angry SSH login attempts must have succeeded

OK. I'm a TOTAL newbie.

My machine has been compromised in this way. I use ssh to connect ot school and work from home, mostly to move data around.
Right now there's a server listening on port 22 (well actually I've unplugged the box from the wall so no one is actually listening...)

Where do I start????

Thanks in advance.

Old 09-19-2004, 06:58 PM   #2
Senior Member
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
What makes you think you've been compromised? Please provide as much detail as possible.

Note: I'm making this into it's own thread, since the original is more of an info thread rather than forensics.
Old 09-19-2004, 08:03 PM   #3
Registered: Sep 2004
Distribution: Slackware 10.2
Posts: 276

Rep: Reputation: 30
your box, like most by unix/linux is running ssh on port 22. This is so you can connect to port 22 on your machine...this is a service for you--thus its a server. You can drop/reject connections to your machine in a firewall/router, turn it off, or delete it. You will still have the ssh client which allows you to connect to other ssh servers. I doubt you have been 'hacked'.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Compromised by SSH bruteforce MBH Linux - Security 3 09-16-2005 10:10 PM
SSH brute force.... compromised? heri0n Linux - Security 15 11-21-2004 05:51 PM
Ssh Compromised!!???help!!! Savedadogs Linux - Security 12 02-10-2004 12:48 AM
ftp login -- ssh no login waffe Linux - General 4 12-27-2003 12:42 AM
Ssh Compromised! Savedadogs Linux - General 1 04-28-2002 03:29 PM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:22 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration