Boston Linux & Unix (BLU) Home | Calendar | Mail Lists | List Archives | Desktop SIG | Hardware Hacking SIG
Wiki | Flickr | PicasaWeb | Video | Maps & Directions | Installfests | Keysignings
Linux Cafe | Meeting Notes | Blog | Linux Links | Bling | About BLU

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

break-in attempts on my server



> Is there *anything* else I can do?  There's hundreds of these  
> attempts.

i block these attempts on my machine using http://www.sshblack.com/

"The sshblack script is a real-time security tool for secure shell  
(ssh). It monitors *nix log files for suspicious activity and reacts  
appropriately to aggressive attackers by adding them to a "blacklist"  
created using various firewalling tools -- such as iptables --  
available in most modern versions of Unix and Linux. The blacklist is  
simply a list of source IP addresses that are prohibited from making  
ssh connections to the protected host. Once a predetermined amount of  
time has passed, the offending IP address is removed from the  
blacklist."





BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org