Stupid SSH tricks

Adil Kodian akodian-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org
Fri Sep 10 19:22:05 UTC 2004


On Fri, 10 Sep 2004 13:19:09 -0400, Wil McGilvery <wmcgilvery-6d3DWWOeJtE at public.gmane.org> wrote:
> I have these idiots who are using a brute force attach on ssh to gain access to the system. They try over and over again with different ip addresses.
> 
> Is there any way to block an ip address after it has failed a certain number of attempts or do I have write my own script for this?


if your SSH is patched and up2date, and if youre not geting too much
traffic - I would just leave it alone and let them try to hack it.
Sometime back there was a brute force SSH worm that would try accounts
like guest/guest and others.
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml





More information about the Legacy mailing list