Gentoo Archives: gentoo-user

From: Joseph <syscon@×××××××××.com>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] SSH authentication attempts - serious issue
Date: Mon, 05 Jun 2006 16:37:27
Message-Id: 1149525108.20102.43.camel@sysconcept.ca
In Reply to: [gentoo-user] SSH authentication attempts - serious issue by Leandro Melo de Sales
1 Try port knocking. It is very effective.
2 Your ssh port will be closed until you successfully hit certain number
3 of ports and even though the ssh port will be open only to the IP
4 address that successfully opened the port all others will see ssh port
5 as closed.
6
7 --
8 #Joseph
9
10 On Mon, 2006-06-05 at 12:06 -0300, Leandro Melo de Sales wrote:
11 > Hi,
12 >
13 > today when I was checking the server log I got many external
14 > attempts to connect to my sshd service:
15 >
16 > ...
17 > Jun 5 05:09:45 embedded sshd[4740]: Invalid user barbara from x.y.w.z
18 > Jun 5 05:09:46 embedded sshd[4742]: Invalid user barb from x.y.w.z
19 > Jun 5 05:09:48 embedded sshd[4744]: Invalid user barbie from x.y.w.z
20 > Jun 5 05:09:50 embedded sshd[4746]: Invalid user barbra from x.y.w.z
21 > Jun 5 05:09:51 embedded sshd[4748]: Invalid user barman from x.y.w.z
22 > Jun 5 05:09:53 embedded sshd[4750]: Invalid user barney from x.y.w.z
23 > ...
24
25 --
26 gentoo-user@g.o mailing list

Replies

Subject Author
Re: [gentoo-user] SSH authentication attempts - serious issue Leandro Melo de Sales <leandroal@×××××.com>