On Fri, 2011-11-18 at 21:14 +0530, Abhijeet Nagawade wrote:


> My port 22 for ssh was open and root login enabled via SSH
> 
> 
> I checked /var/log/secure and found login by some IP addresses never
> used by me.
> 
> 
> IP Lookup showed those IP belonging to south america.


> Formatted the machine and disabled root login via SSH also blocked
> port 22 on router (WAN)


If I need SSH I always reassign it to a non-standard port.


Paul.