RE: [webmin-l] Understanding daily "LogWatch"?

[<pr...@pr...>]

From: Prodos

Greetings


Vern wrote:
> These are attempted hacks (logon failures) into your box. Many are created by
> dictionary password crack programs that are used to attempt to figure out user name
> and passwords on your box. I used to get these and figured the best thing to do is to
> block the ssh port (tcp port 22) and only allow specific IP addresses, that I specify,
> access to that port.

I see.

Thanks for that information.

Sorry to ask such a dumb question but:

What can anyone gain by getting into my server by this method?

Is it simply vandalism, or is there some sort of point to it?

For instance, does it allow the "hackers" to use my server to
run their own websites or email/spam programs?


Best Wishes,

PRODOS

http://prodos.thinkertothinker.com