On Wed, Mar 11, 2009 at 21:56:08 -0500,
Joe Nall <joe(a)nall.com> wrote:
Wouldn't the mention of fail2ban be appropriate? My servers with public
IP addresses get hundreds of failed login attempts per day unless I use
iptables to block repeat offenders.
If you are just getting hundreds per day you shouldn't need to worry
about it. You shouldn't have passwords so simple as to be significantly
vulnerable to guessing at that rate. This is also unlikely to be a high
enough rate to cause denial of service problems for your machine.