[WBEL-users] Daily SSH attempted logins

Edward Rudd eddie at omegaware.com
Sat Mar 5 00:07:04 CST 2005


On Fri, 2005-03-04 at 13:20, Luke Scharf wrote:
> On Fri, 2005-03-04 at 13:06, John Hinton wrote:
> > Anybody got a good way to stop these SSH login attempts going around? 
> > Besides killing sshd?
> 
> I sometimes e-mail the ISP who owns the IP of the person who was
> attempting to log into my machine.  It hasn't been real effective, and
> takes time -- but it can be satisfying.

I do at times done that, but so far haven't had much success with any
responses.. One I did e-mail was when some machine in their block
attempted to login to my machine over 3000 times in under 30 seconds.
Good thing I switched it to PKI only.. 

Another solution is to play around with portsentry and set it up to
start blocking these random hacking attempts before they get to far. I
need to start playing with that software myself.


> -Luke
-- 
Edward Rudd <eddie at omegaware.com>
Website http://www.outoforder.cc/



More information about the Whitebox-users mailing list