hacked by me?

Wednesday, November 03, 2004, at 09:41AM

By Eric Richardson

I just totally freaked myself out into thinking I had been hacked. I logged onto my server and saw a last login line I didn't recognize at all, at a time last night when I didn't think I was anywhere near a computer. I didn't need this.

Then I realized I actually ssh'ed in from Kathy's apartment then to check my email.

Whew...

I should keep a more active eye on the logs, though. I do see stuff like:

Nov  2 05:46:51 bit sshd[31463]: Illegal user patrick from 137.48.138.228
Nov  2 05:46:52 bit sshd[31465]: Illegal user patrick from 137.48.138.228
Nov  2 05:46:58 bit sshd[31478]: Illegal user rolo from 137.48.138.228
Nov  2 05:46:59 bit sshd[31481]: Illegal user iceuser from 137.48.138.228
Nov  2 05:47:00 bit sshd[31483]: Illegal user horde from 137.48.138.228
Nov  2 05:47:01 bit sshd[31486]: Illegal user cyrus from 137.48.138.228
Nov  2 05:47:02 bit sshd[31489]: Illegal user www from 137.48.138.228
Nov  2 05:47:03 bit sshd[31491]: Illegal user wwwrun from 137.48.138.228

That one goes on for another 20 names or so. I feel pretty good about my security, but always better safe than sorry.