[mythtv-users] SSH break in attempt this morning using mythtv user

[Steve Daniels]

> -----Original Message-----
> From: mythtv-users-bounces at mythtv.org [mailto:mythtv-users- 
> bounces at mythtv.org] On Behalf Of Jason Gillis
> Sent: 28 February 2006 02:20
> To: john.nissley at yahoo.com; jnissley at nissley.org
> Cc: Discussion about mythtv
> Subject: [mythtv-users] SSH break in attempt this morning using mythtv 
> user
> 
> Hi John,
> 
> Why am I emailing you tonight?  Well, it looks like you have a machine 
> on
> 24.1.121.211 that tried to break into my system this morning.  I was 
> able to track you down via the whois information for your domain 
> (nissley.org) and the IP address in my logs.
> 
> Why am I CC'ing this to the mythtv-users mail list?  Well, the 
> following information is really useful to other mythtv system owners 
> who may also be affected by John's break in activity.  It's 
> interesting that the attempts from your IP address only tried to use 
> the mythtv login name, so I'm guessing it's a fairly targetted attack.  
> If you're a mythtv user and you have an Internet accessible mythtv 
> system, please check your logs to see if anyone other than you has 
> logged into your system as the user mythtv.
> 

Thanks for the heads up here Jason. I just realised I was wide open. I'm
sure a lot of other people have too. I never really secured my backend that
much because it wasn't connected to the net externally. That was until a few
weeks ago I wanted to quickly log in and change a few settings and opened up
the standard ssh port.. I am very glad you reminded I'd done that!

> 
> Thanks,
> Jason
> 
> 

Thank You!

Steve