Re: [plz. help] constant attack from: 201.244.17.162, 222.231.60.88, 82.207.116.209....

2007-11-30 Thread Craig Skinner
On Mon, Nov 26, 2007 at 06:56:51PM -0800, badeguruji wrote: > I just discovered by chance that, someone is > constantly trying to break into my openbsd box from: > > My box is behind router-NAT which is allowing ssh. Try something like this, drops ssh connections from IPs that try more than 5 tim

Re: [plz. help] constant attack from: 201.244.17.162, 222.231.60.88, 82.207.116.209....

2007-11-26 Thread Peter N. M. Hansteen
badeguruji <[EMAIL PROTECTED]> writes: > Nov 9 03:24:51 sshd[15822]: Did not > receive identification string from 218.76.217.234 > > Nov 10 16:55:19 sshd[29183]: Did not > receive identification string from 82.207.116.209 > Nov 10 16:58:58 sshd[21261]: Failed > password for root from 82.207.11

Re: [plz. help] constant attack from: 201.244.17.162, 222.231.60.88, 82.207.116.209....

2007-11-26 Thread Bryan Irvine
Deal with it. Make sure the passwords are secure. These happen all day long to everyone on the Internet. Likely the machines themselves are someone else's hacked machines so any 'punishment' will be directed at the wrong people. things to try: Move SSH to a different port, use PF to block the I

Re: [plz. help] constant attack from: 201.244.17.162, 222.231.60.88, 82.207.116.209....

2007-11-26 Thread Travers Buda
> On Mon, Nov 26, 2007 at 06:56:51PM -0800, badeguruji wrote: > > I just discovered by chance that, someone is > > constantly trying to break into my openbsd box from: > > > > 201.244.17.162 [corporativos24417-162.etb.net.co] > > 203.113.85.26 > > 211.20.79.85 > > 71.159.221.78 > > 82.207.116.209

Re: [plz. help] constant attack from: 201.244.17.162, 222.231.60.88, 82.207.116.209....

2007-11-26 Thread Nick Guenther
On Nov 26, 2007 9:56 PM, badeguruji <[EMAIL PROTECTED]> wrote: > I just discovered by chance that, someone is > constantly trying to break into my openbsd box from: ,... > > whois details on each IP go to South America, Bangkok, > Taiwan... all over the world! Although i have sent > email to the em

Re: [plz. help] constant attack from: 201.244.17.162, 222.231.60.88, 82.207.116.209....

2007-11-26 Thread Douglas A. Tutty
On Mon, Nov 26, 2007 at 06:56:51PM -0800, badeguruji wrote: > I just discovered by chance that, someone is > constantly trying to break into my openbsd box from: > > 201.244.17.162 [corporativos24417-162.etb.net.co] > 203.113.85.26 > 211.20.79.85 > 71.159.221.78 > 82.207.116.209 > > whois details

[plz. help] constant attack from: 201.244.17.162, 222.231.60.88, 82.207.116.209....

2007-11-26 Thread badeguruji
I just discovered by chance that, someone is constantly trying to break into my openbsd box from: 201.244.17.162 [corporativos24417-162.etb.net.co] 203.113.85.26 211.20.79.85 71.159.221.78 82.207.116.209 whois details on each IP go to South America, Bangkok, Taiwan... all over the world! Although