[nycbug-talk] Distributed ssh dictionary attacks

Dan Langille dan at langille.org
Tue Nov 25 21:38:28 EST 2008

On Nov 25, 2008, at 7:19 PM, Jonathan wrote:

> Is anyone else seeing the usual ssh attacks go distributed?  I'm  
> seeing
> failed usernames from a large variety of address going by in a slow
> alphabetical list.  I guess I will have to actually change ssh to an
> alternate port to quiet the logs a bit :P  Anyone have any other
> suggestions or is that the best workaround these days?

Not me. That's my usual suggestion (alternative port number).
That, or restrict SSH to specific sources.  Or both.

Dan Langille

More information about the talk mailing list