Re: Block IP

From: Me Here (Me_at_here.com)
Date: 05/07/05

  • Next message: Peter Gutmann: "Re: Authentication method changed from OpenSSH_3.4p1 to OpenSSH_3.8.1p1?" 
    Date: Sat, 07 May 2005 11:43:37 -0400

    That's true, however if you're getting bad behaviour from that IP then I
    suspect the admin of that machine might have bigger headaches than you
    blocking access to your machine.

    For the OP; yes you can detect these ssh attempts. A combination of some
    scripting language and your logs is a perfect way to stop such attacks.

    One caveat though, make sure you don't go and ban your own set of IPs. :]

    Me.

    Benn Newman wrote:
    > -----BEGIN PGP SIGNED MESSAGE-----
    > Hash: SHA1
    >
    > Just remember that what ever you do, an IP address does not always equal a
    > person and can cause headaches for other uses, and they may have no idea
    > what caused it.
    >
    > AdamZ.org wrote:
    >
    >
    >>Hi,
    >>Is there any way that can detect random ssh login attempts and
    >>blacklist (temporarily or permanently) the IP address after X
    >
    > [snip]
    > - --
    > Benn Newman - newmanbe@freeshell.org
    > SDF Public Access UNIX System | gopher://sdf.lonestar.org |
    > http://sdf.lonestar.org
    > -----BEGIN PGP SIGNATURE-----
    > Version: GnuPG v1.4.0 (Darwin)
    >
    > iEYEARECAAYFAkJ8LUwACgkQFE65lPR8xrH1pQCfS+eQQHJDe47GLoU7MPoR63PJ
    > jf4An07RTUtVCxLoDhWDXEJJ4bx0n9KA
    > =tD/v
    > -----END PGP SIGNATURE-----

  • Next message: Peter Gutmann: "Re: Authentication method changed from OpenSSH_3.4p1 to OpenSSH_3.8.1p1?"
    • Quantcast