Attempted SSHD Login
The last 2 nights I have got my LogWatch delivered to my email.This has appeared down the bottom of the email:
--------------------- SSHD Begin ------------------------
Didn't receive an ident from these IPs:
dsl81-215-40970.adsl.ttnet.net.tr (81.215.160.10): 3 Time(s)
w80.arrayinc.com (67.104.141.80): 5 Time(s)
It was from a different IP the night before, and has only just started to happen.
Obviously they arent getting in, but has anyone else experienced this sort of thing?
Surely they arent just trying to guess the root pass?
Is there anything more I can do as its quite un-nerving
Cheers!