[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ale] failed ssh login attempts
- Subject: [ale] failed ssh login attempts
- From: jwl at sgi.com (Jim Lynch)
- Date: Fri Feb 11 15:23:38 2005
- In-reply-to: <[email protected]>
- References: <004001c50fb8$6473d8c0$c901a8c0@ohmu> <[email protected]>
What someone really needs to do is write a ssh spoofing daemon to accept
any user and any password and let them think they've logged in. If
there were enough out there, maybe it would keep the chaps busy sorting
the spoofs from reality.
Jim.
Jason Fritcher wrote:
> Googi Singha wrote:
>
>> Most of these scan tools seem to use cleartext passwords. If you enable
>> keys and also follow hints such as the ones below - you should be pretty
>> safe.
>
>
> I went one step further and turned off password authentication
> altogether. Now I don't even see the attempt messages in the logs. :)
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Ale mailing list
>Ale at ale.org
>http://www.ale.org/mailman/listinfo/ale
>