1 |
I have a question: |
2 |
|
3 |
Is there an application/program which can send an email whenever this |
4 |
ssh attack happen? |
5 |
|
6 |
A few months ago I got 300 attempts which made me close ssh port |
7 |
and stop using it for a while. |
8 |
|
9 |
Thanks |
10 |
|
11 |
Alfredito |
12 |
|
13 |
|
14 |
|
15 |
|
16 |
Jochen Maes <sejo@g.o> |
17 |
10/10/2005 05:52 AM |
18 |
Please respond to |
19 |
gentoo-security@l.g.o |
20 |
|
21 |
|
22 |
To |
23 |
gentoo-security@l.g.o |
24 |
cc |
25 |
|
26 |
Subject |
27 |
[gentoo-security] hackers |
28 |
|
29 |
|
30 |
|
31 |
|
32 |
|
33 |
|
34 |
-----BEGIN PGP SIGNED MESSAGE----- |
35 |
Hash: SHA1 |
36 |
|
37 |
Hey all, |
38 |
|
39 |
|
40 |
ok one off my servers i keep on getting one iprange that tries to |
41 |
login through ssh (200-300) attemps with other usernames. |
42 |
This is probably a script that's being ran all the time, but the isp |
43 |
doesn't mind, i allready sent my logs and my complaints and i don't |
44 |
get any response. |
45 |
Is there something like hackerwatch that i can send those logs to |
46 |
(preferrably automatically) when happening? |
47 |
I've blocked the range now so isn't a problem but hate it that the isp |
48 |
doesn nothing against it. |
49 |
|
50 |
greetings, |
51 |
|
52 |
SeJo |
53 |
|
54 |
- -- |
55 |
"Defer no time, delays have dangerous ends" |
56 |
|
57 |
Jochen Maes |
58 |
Gentoo Linux |
59 |
Gentoo Belgium |
60 |
http://sejo.be |
61 |
http://gentoo.be |
62 |
http://gentoo.org |
63 |
-----BEGIN PGP SIGNATURE----- |
64 |
Version: GnuPG v1.4.2 (GNU/Linux) |
65 |
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org |
66 |
|
67 |
iD8DBQFDSjnYMXMsRNMHhmARAoXVAJ92bRcBAO04hIUk2VgBOcpm1gm9cgCgmNHe |
68 |
ZPNqAHab5fXLdx11vdod5rc= |
69 |
=35Kg |
70 |
-----END PGP SIGNATURE----- |
71 |
|
72 |
-- |
73 |
gentoo-security@g.o mailing list |