[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ale] SSH attempts
- Subject: [ale] SSH attempts
- From: erik at mathists.com (Erik Mathis)
- Date: Mon, 12 Sep 2011 11:59:08 -0400
- In-reply-to: <CA+f4BnO4jKWb_H8T71+Vr4E==TMoyzWMe3=H1DR9FsGLKSyN0g@mail.gmail.com>
- References: <CA+f4BnO4jKWb_H8T71+Vr4E==TMoyzWMe3=H1DR9FsGLKSyN0g@mail.gmail.com>
Use denyhosts. Simple and really easy to use.
On Mon, Sep 12, 2011 at 11:05 AM, David Hillman <hillmands at gmail.com> wrote:
> According to the PortSentry logs for my server, I have received thousands of
> connection attempts via SSH port 22. ?Of course, that is not the port the
> real SSH service is listening on. Logins were also disabled for root.
> What's interesting is the IP addresses all belong to Serverloft
> (www.serverloft.eu); most attempts came from 188.138.32.16
> (loft4385.serverloft.eu). ?I am guessing someone with a few VPS boxes has
> nothing better to do than use up network bandwidth to terrorize the rest of
> us. ?Or, maybe those boxes have been compromised.
> I have e-mailed the folks over over at Serverloft, but I don't expect
> anything of it. ?Is there anything else I can do?
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>
>