[nycbug-talk] Distributed ssh dictionary attacks

[Dan Langille]

On Nov 25, 2008, at 7:19 PM, Jonathan wrote:

> Is anyone else seeing the usual ssh attacks go distributed?  I'm  
> seeing
> failed usernames from a large variety of address going by in a slow
> alphabetical list.  I guess I will have to actually change ssh to an
> alternate port to quiet the logs a bit :P  Anyone have any other
> suggestions or is that the best workaround these days?

Not me. That's my usual suggestion (alternative port number).
That, or restrict SSH to specific sources.  Or both.

-- 
Dan Langille
http://langille.org/