Odd ssh attacks?

Bruce Marshall bmarsh at bmarsh.com
Fri Jul 20 14:39:30 UTC 2007


On Friday 20 July 2007, Njoku, George O. wrote:
> I wrote a Perl script and put in Cron(4 times an hour) to block IPs of
> probes-"Invalid Users".
> Normally ssh client bots keep trying different users to brute force
> their way in.
>
> Rather than having them constantly trying flooding my network with
> requests, I just block IP.
> Currently, I use iptables, but it could be better to put them in
> hosts.deny
>
> I know...unconventional, but ok.

Unless there is something to prevent you from doing so, I've found it is much 
better to put ssh  on a high port  which eliminates all the script-kiddie 
stuff.

Just checked my logs....   nothing to see there......




More information about the ubuntu-users mailing list