You might not have the opportunity, but I only allow public key authentication to the machines I manage. I know no one but the NSA can brute force that.
On Wed, 15 Dec 2004 23:30:29 -0700, Scott Paul Robertson <[EMAIL PROTECTED]> wrote: > On Wed, Dec 15, 2004 at 11:04:58PM -0700, Mark Gardner wrote: > > my messages log has hundreds of theres > > Dec 15 09:38:46 McBain sshd(pam_unix)[4483]: authentication failure; > > logname= uid=0 euid=0 tty=ssh ruser= > > rhost=access-212.14.rev.fr.colt.net > > Dec 15 09:38:50 McBain unix_chkpwd[4488]: check pass; user unknown > > > > My server gets on the average about 500 of these a week for roughly 2-8 > clients. I just block them using /etc/hosts.deny (Redhat/Fedora). > > One thing that helped was turning off root login over ssh. > > They're likely infected machines just trying to brute force into your > machine. Rather annoying really. > > -- > Scott Paul Robertson > http://spr.mahonri5.net > GnuPG FingerPrint: 09ab 64b5 edc0 903e 93ce edb9 3bcc f8fb dc5d 7601 > > > -------------------- > BYU Unix Users Group > http://uug.byu.edu/ > > The opinions expressed in this message are the responsibility of their > author. They are not endorsed by BYU, the BYU CS Department or BYU-UUG. > ___________________________________________________________________ > List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list > > > -------------------- BYU Unix Users Group http://uug.byu.edu/ The opinions expressed in this message are the responsibility of their author. They are not endorsed by BYU, the BYU CS Department or BYU-UUG. ___________________________________________________________________ List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list
