From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1L81QM-0004Vp-AU for garchives@archives.gentoo.org; Wed, 03 Dec 2008 23:46:30 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D6EE5E05DB; Wed, 3 Dec 2008 23:46:28 +0000 (UTC) Received: from smtp.athabascau.ca (smtp.athabascau.ca [131.232.10.21]) by pigeon.gentoo.org (Postfix) with ESMTP id C02F1E05DB for ; Wed, 3 Dec 2008 23:46:28 +0000 (UTC) Received: from CONVERSION-DAEMON.local.athabascau.ca by local.athabascau.ca (PMDF V6.2-1x12 #31425) id <0KBB0VH01RDEJV@local.athabascau.ca> for gentoo-user@lists.gentoo.org; Wed, 03 Dec 2008 16:46:27 -0700 (MST) Received: from dimon.pc.athabascau.ca ([131.232.4.135]) by local.athabascau.ca (PMDF V6.2-1x12 #31425) with ESMTP id <0KBB0VG2VRDEXW@local.athabascau.ca>; Wed, 03 Dec 2008 16:46:26 -0700 (MST) Date: Wed, 03 Dec 2008 16:46:21 -0700 From: "Dmitry S. Makovey" Subject: Re: [gentoo-user] Curious pattern in log files from ssh... In-reply-to: <58965d8a0812031521o18e02b1cq17ba380a4666084e@mail.gmail.com> To: gentoo-user@lists.gentoo.org Cc: Paul Hartman Message-id: <200812031646.27958.dmitry@athabascau.ca> Organization: Athabasca University X-Envelope-from: dmitry@athabascau.ca Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-version: 1.0 Content-type: multipart/signed; boundary=nextPart1670914.sCTt7ofN95; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-transfer-encoding: 7BIT User-Agent: KMail/1.9.9 References: <4936E5E3.1040606@shic.co.uk> <49370E5B.2030000@shic.co.uk> <58965d8a0812031521o18e02b1cq17ba380a4666084e@mail.gmail.com> X-Archives-Salt: 27597596-71c0-443a-bccd-5dd374d85c9a X-Archives-Hash: 601583a41a0a4e8399b809048d2ea438 --nextPart1670914.sCTt7ofN95 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On December 3, 2008, Paul Hartman wrote: > Of course, this is assuming the botnet stops after rejected connections... oh no, not rejected - dropped ;) let them go through pains of timing out=20 without knowing if anything is actually listening on the other side ;) =2D-=20 Dmitry Makovey Web Systems Administrator Athabasca University (780) 675-6245 --nextPart1670914.sCTt7ofN95 Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iD8DBQBJNxpTyDrVuGfS98QRAoyYAJ47K8qosaaJSFbQHekdCK98dToD5gCeL1ow iG2kP4WnPqDUNRJRaAXwT08= =jY5I -----END PGP SIGNATURE----- --nextPart1670914.sCTt7ofN95--