LWN.net Logo

Brute-Force SSH Server Attacks Surge (InformationWeek)

Brute-Force SSH Server Attacks Surge (InformationWeek)

Posted May 14, 2008 17:23 UTC (Wed) by ikm (subscriber, #493)
In reply to: Brute-Force SSH Server Attacks Surge (InformationWeek) by leoc
Parent article: Brute-Force SSH Server Attacks Surge (InformationWeek)

I second that. Drops from thousands of attempts a day to zero. While it won't give too much
security in case of a deliberately planned attack on you, most of the attacks are just
automated scripts which check for root=root, lp=lp, etc, creating a mess in the logs.


(Log in to post comments)

Brute-Force SSH Server Attacks Surge (InformationWeek)

Posted May 15, 2008 15:02 UTC (Thu) by jhardin (guest, #3297) [Link]

In addition to changing the listen port on your system, put a TCP tarpit (e.g. LaBrea) on port
22.

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds