18 Oct
2007
18 Oct
'07
1:30 p.m.
On 10/18/07, Chris G cl@isbd.net wrote:
However looking at my system logs shows very few attempts to login using ssh, like a dozen or so a day, and they use only very obvious user IDs.
Only a dozen? Crikey!
In a day I typically get between 1 and 5 attempt runs. If left unchecked each attempt run will try many, many obvious user names and passwords for about an hour. I run a blocking tool which inserts a DROP entry in the IP tables after 4 bad user names. The IP address is automatically unblocked after about ten days.
Tim.