Gentoo Archives: gentoo-security

From: APerez@×××.ca
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] hackers
Date: Tue, 11 Oct 2005 12:30:39
Message-Id: OFB2EF5146.E8821ABC-ON85257097.0043A1ED-85257097.0043B5C7@cds.ca
In Reply to: [gentoo-security] hackers by Jochen Maes
1 I have a question:
2
3 Is there an application/program which can send an email whenever this
4 ssh attack happen?
5
6 A few months ago I got 300 attempts which made me close ssh port
7 and stop using it for a while.
8
9 Thanks
10
11 Alfredito
12
13
14
15
16 Jochen Maes <sejo@g.o>
17 10/10/2005 05:52 AM
18 Please respond to
19 gentoo-security@l.g.o
20
21
22 To
23 gentoo-security@l.g.o
24 cc
25
26 Subject
27 [gentoo-security] hackers
28
29
30
31
32
33
34 -----BEGIN PGP SIGNED MESSAGE-----
35 Hash: SHA1
36
37 Hey all,
38
39
40 ok one off my servers i keep on getting one iprange that tries to
41 login through ssh (200-300) attemps with other usernames.
42 This is probably a script that's being ran all the time, but the isp
43 doesn't mind, i allready sent my logs and my complaints and i don't
44 get any response.
45 Is there something like hackerwatch that i can send those logs to
46 (preferrably automatically) when happening?
47 I've blocked the range now so isn't a problem but hate it that the isp
48 doesn nothing against it.
49
50 greetings,
51
52 SeJo
53
54 - --
55 "Defer no time, delays have dangerous ends"
56
57 Jochen Maes
58 Gentoo Linux
59 Gentoo Belgium
60 http://sejo.be
61 http://gentoo.be
62 http://gentoo.org
63 -----BEGIN PGP SIGNATURE-----
64 Version: GnuPG v1.4.2 (GNU/Linux)
65 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
66
67 iD8DBQFDSjnYMXMsRNMHhmARAoXVAJ92bRcBAO04hIUk2VgBOcpm1gm9cgCgmNHe
68 ZPNqAHab5fXLdx11vdod5rc=
69 =35Kg
70 -----END PGP SIGNATURE-----
71
72 --
73 gentoo-security@g.o mailing list

Replies

Subject Author
Re: [gentoo-security] hackers Chris Smart <taskara@××××××××××××.net>
RE: [gentoo-security] hackers Sean Cook <scook@×××××.net>
Re: [gentoo-security] hackers Oliver Schad <o.schad@×××.de>
Re: [gentoo-security] hackers Kurt Lieber <klieber@g.o>
Re: [gentoo-security] hackers Erik Anderson <erikerik@×××××.com>