On Wed, October 27, 2004 18:54, Jim Higson said:
> Good points James...you missed one though... port 22. I see more
> attempts
> on SSH than any other port....stupid and LAME attempts but more on this
> than any other...
Out of curiosity, how much does it really matter so long as you have
strong
passwords?
I do see more brute force attempts @ ssh these days and start wondering
how much longer some script kiddie needs to make the algortihm a bit more
clever (and eg attack user names on certain hosts which are likely to
exist. This could be harvested eg from email addresses...).
I have hacked a script which tails /var/log/secure and reacts on attempts
to log in as root with password. Such offending IPs are then denied port
22 access. Any comments, positive or negative, on this?
--
HaJo Schatz <hajo(a)hajo.net>
http://www.HaJo.Net
PGP-Key:
http://www.hajo.net/hajonet/keys/pgpkey_hajo.txt