Gentoo Archives: gentoo-user

From: CR Little <crlittle@××××××××××.com>
To: gentoo-user@l.g.o
Subject: RE: [gentoo-user] SSH authentication attempts - serious issue
Date: Mon, 05 Jun 2006 16:47:06
Message-Id: 8D0AE50C52974F4AA9971F5C25A034596FC47A@murph.madison.local
1 Do Programs like denyhosts work with other protocols? Such as POP or
2 FTP?
3
4 -----Original Message-----
5 From: Joseph [mailto:syscon@×××××××××.com]
6 Sent: Monday, June 05, 2006 11:32 AM
7 To: gentoo-user@l.g.o
8 Subject: Re: [gentoo-user] SSH authentication attempts - serious issue
9
10 Try port knocking. It is very effective.
11 Your ssh port will be closed until you successfully hit certain number
12 of ports and even though the ssh port will be open only to the IP
13 address that successfully opened the port all others will see ssh port
14 as closed.
15
16 --
17 #Joseph
18
19 On Mon, 2006-06-05 at 12:06 -0300, Leandro Melo de Sales wrote:
20 > Hi,
21 >
22 > today when I was checking the server log I got many external
23 > attempts to connect to my sshd service:
24 >
25 > ...
26 > Jun 5 05:09:45 embedded sshd[4740]: Invalid user barbara from x.y.w.z
27 > Jun 5 05:09:46 embedded sshd[4742]: Invalid user barb from x.y.w.z
28 > Jun 5 05:09:48 embedded sshd[4744]: Invalid user barbie from x.y.w.z
29 > Jun 5 05:09:50 embedded sshd[4746]: Invalid user barbra from x.y.w.z
30 > Jun 5 05:09:51 embedded sshd[4748]: Invalid user barman from x.y.w.z
31 > Jun 5 05:09:53 embedded sshd[4750]: Invalid user barney from x.y.w.z
32 > ...
33
34 --
35 gentoo-user@g.o mailing list
36
37
38
39
40 This message contains information from SourceLink - Madison
41 which may be confidential and privileged. If you are not an
42 intended recipient, please refrain from any disclosure, copying,
43 distribution, or use of this information and note that such
44 actions are prohibited. If you have received this transmission
45 in error, please notify by email it-support@×××××××××××××××××.com.
46
47
48 --
49 gentoo-user@g.o mailing list