On Wed, Apr 06, 2005 at 10:49:08AM -0500, Martin McCormick wrote: > We have been noticing flurries of sshd reject messages in > which some system out there in the hinterlands hits us with a flood of > ssh login attempts. An example:
[snip] If you search google, you'll see many recent similar threads on both this and other mailing lists. Perhaps the most interesting is one recently on the DragonFly BSD users list, in which there were several scripts / applications written to analyze the logs and add IPFW / PF rules blocking these connections. It's simply a brute force kiddy script. No harm. Or, shouldn't be if you don't use silly passwords ;) The script simply tries user:user combinations. --Devon
pgpmvawMX19YZ.pgp
Description: PGP signature