Possible hacking on SSH what should I do?

Myles Braithwaite me-qIX3qoPyADtH8hdXm2+x1laTQe2KTcn/ at public.gmane.org
Tue Jul 13 19:15:39 UTC 2010


Some one from a French IP is trying to access one of my servers:

Jul 13 15:05:30 fox sshd[1866]: reverse mapping checking getaddrinfo
for 23-194.213-56.static-ip.oleane.fr [213.56.194.23] failed -
POSSIBLE BREAK-IN ATTEMPT!

They probably wont be able to get in (I use only ssh keys access) but
what is the best procedure to stop from getting further.

Should I contact the ISP?
Should I ban him under '/etc/hosts.deny'?

-- 
Myles Braithwaite
http://mylesbraithwaite.com | me-qIX3qoPyADtH8hdXm2+x1laTQe2KTcn/@public.gmane.org
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists





More information about the Legacy mailing list