[Discuss] Reading logwatch e-mails

2024-06-12 Thread Kent Borg
I recently started actually looking at logwatch e-mails I had been ignoring. These machines have sshd listening on the open internet, and man, there are a lot of failed ssh logins. 7924 seems like a lot for one day, for an obscure, rather new host. A different machine that has been around much

Re: [Discuss] Reading logwatch e-mails

2024-06-12 Thread Rich Pieri
On Wed, 12 Jun 2024 09:09:17 -0700 Kent Borg wrote: > I recently started actually looking at logwatch e-mails I had been > ignoring. These machines have sshd listening on the open internet, > and man, there are a lot of failed ssh logins. Fastest I've seen a new machine starting to get attacked