[nycbug-talk] Distributed ssh dictionary attacks
dan at langille.org
Tue Nov 25 21:38:28 EST 2008
On Nov 25, 2008, at 7:19 PM, Jonathan wrote:
> Is anyone else seeing the usual ssh attacks go distributed? I'm
> failed usernames from a large variety of address going by in a slow
> alphabetical list. I guess I will have to actually change ssh to an
> alternate port to quiet the logs a bit :P Anyone have any other
> suggestions or is that the best workaround these days?
Not me. That's my usual suggestion (alternative port number).
That, or restrict SSH to specific sources. Or both.
More information about the talk