Odd ssh attacks?
Bruce Marshall
bmarsh at bmarsh.com
Fri Jul 20 14:39:30 UTC 2007
On Friday 20 July 2007, Njoku, George O. wrote:
> I wrote a Perl script and put in Cron(4 times an hour) to block IPs of
> probes-"Invalid Users".
> Normally ssh client bots keep trying different users to brute force
> their way in.
>
> Rather than having them constantly trying flooding my network with
> requests, I just block IP.
> Currently, I use iptables, but it could be better to put them in
> hosts.deny
>
> I know...unconventional, but ok.
Unless there is something to prevent you from doing so, I've found it is much
better to put ssh on a high port which eliminates all the script-kiddie
stuff.
Just checked my logs.... nothing to see there......
More information about the ubuntu-users
mailing list