[WBEL-users] Daily SSH attempted logins
eddie at omegaware.com
Sat Mar 5 00:07:04 CST 2005
On Fri, 2005-03-04 at 13:20, Luke Scharf wrote:
> On Fri, 2005-03-04 at 13:06, John Hinton wrote:
> > Anybody got a good way to stop these SSH login attempts going around?
> > Besides killing sshd?
> I sometimes e-mail the ISP who owns the IP of the person who was
> attempting to log into my machine. It hasn't been real effective, and
> takes time -- but it can be satisfying.
I do at times done that, but so far haven't had much success with any
responses.. One I did e-mail was when some machine in their block
attempted to login to my machine over 3000 times in under 30 seconds.
Good thing I switched it to PKI only..
Another solution is to play around with portsentry and set it up to
start blocking these random hacking attempts before they get to far. I
need to start playing with that software myself.
Edward Rudd <eddie at omegaware.com>
More information about the Whitebox-users