Re: POSSIBLE BREAK-IN in auth.log via ssh
On Thu, 12 Feb 2009 19:40:16 +1100
Alex Samad <alex@samad.com.au> wrote:
> this is ssh complaining about incorrect password being supplied, I
> presume you do not allow password authentication for root !
>
> This is some script kiddie or mutant pc try brute attack against
> your sshd server, try fail2ban
I used to blacklist all those in my firewall. Then I installed
fail2ban. I don't have to spend the time with the firewall and the
breakin attempts have dropped dramatically, to the point where I
seldom see one any more.
My advice is to install fail2ban.
--
Raquel
http://www.byraquel.com
============================================================
Free speech without responsibility is not liberty; it is licence.
The freedom to swing one's arm ends where it makes contact with one's
neighbour's nose.
--Canadian Broadcast Standards Council
Reply to: