Brute force attack?

bloodline76 · 18 Jun 2009 at 15:42

Getting a few security errors coming up lately, anyone shed any light onto it?

Failed password for root from (IP) port (port number) ssh2

Googled it and says it could be a brute force attempt?

Advice appreciated

Thanks

bloodline76 · 18 Jun 2009 at 15:57

tolien said:
It's nothing specific to you, just an automated scan that found your IP responding on port 22. How many failed logins are you getting?

Only had a few over the last few days. Just checking the numbers, but its happened on three different occassions over two days.

How would I get that information?

bloodline76 · 18 Jun 2009 at 16:04

osc89er said:
3 is a little low for a brute force attack...

Yeah but that 3 seperate attempts of multiple failed

bloodline76 · 18 Jun 2009 at 17:12

tolien said:
What I pasted is from Logwatch on Linux.

Oh im on windows.