On 21-Jun-2010, Marc Nozell (m...@nozell.com) <noz...@gmail.com> sent:
> FYI, I've been using sshguard for a few month to drop routes to
> sites that are probing my server.

On my cable modem at least, I've been seeing an huge increase in
distributed SSH bruteforcing, so sshguard isn't effective. There's
clearly a pattern in the usernames being attempted, but the source IPs
are all over the place.

-- 
Chip Marshall <c...@2bithacker.net>
http://weblog.2bithacker.net/          KB1QYW        PGP key ID 43C4819E
v4sw5PUhw4/5ln5pr5FOPck4ma4u6FLOw5Xm5l5Ui2e4t4/5ARWb7HKOen6a2Xs5IMr2g6CM

Attachment: pgpT9HK1uOLeR.pgp
Description: PGP signature

_______________________________________________
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/

Reply via email to