[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SFTP question



On 12/24/2014 2:48 PM, Danny wrote:
> Hi Guys,
> 
> As a matter of interest, after I installed fail2ban I got this on ssh:
> 
> ###################################################################################################
> Hi,
> 
> The IP 122.225.109.103 has just been banned by Fail2Ban after
> 3 attempts against ssh.
> 
> 
<snip>

Not surprising.  If you haven't been paying attention to your logs (you
should ALWAYS monitor them if you are connected to the internet!), you
haven't seen what has probably been going on for a long time.

I've seen attacks start within hours of putting a new system on the
internet.  I see multiple attacks on my servers every day.  So far
today, the one I was talking about earlier has blocked another 33
attempts against ssh and one against POP3.  Above average, but not terrible.

Attacks seem to have increased in the last few days.  Maybe the longer
nights in the Northern hemisphere have given the hackers more time to
spend on their nefarious activities.

Jerry


Reply to: