1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Root SSH login from India...

Discussion in 'Networking and online stuff' started by amusicsite, 20 Apr 2016.

  1. amusicsite

    amusicsite dn ʎɐʍ sᴉɥ┴ Staff Member

    Got an email today from my server notifying me that my server had a root SSH login from India.

    Immediately I logged in, blocked them and shot an email off to support with a log of what they had done.

    Go the message back "That IP address is one of our remote technicians." from the host and was asked to unblock them as they provide support out of normal UK office hours.

    Most worrying they managed to mess up two commands...

    2016-04-20 screen-ls
    2016-04-20 screen -ls

    2016-04-20 setenforcing 0
    2016-04-20 setenforce 0

    Nothing terribly bad but what if they made a typo that really caused problems, would they even notice???

    Maybe time to look at moving hosts again, though it's not like any of them advertise that they use foreign remote support when they are out of office or any way of telling how good/bad they are....
  2. rusky

    rusky Staff Member

    Our UK based IT company installed SP3 for Exchange 2010 yesterday & now no mail client can connect to exchange!
    amusicsite likes this.
  3. amusicsite

    amusicsite dn ʎɐʍ sᴉɥ┴ Staff Member

    isn't that why a lot of people are moving to gmail? Eliminate the need to upgrade and the problems it can cause for anyone attempting it...