From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1FnIEM-0001Vi-GE for garchives@archives.gentoo.org; Mon, 05 Jun 2006 16:47:06 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.6/8.13.6) with SMTP id k55GjGih019658; Mon, 5 Jun 2006 16:45:16 GMT Received: from murph.madison.local (firewall.sourcelinkmadison.com [66.0.97.93] (may be forged)) by robin.gentoo.org (8.13.6/8.13.6) with ESMTP id k55GaLn5003217 for ; Mon, 5 Jun 2006 16:36:22 GMT Content-Class: urn:content-classes:message Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: RE: [gentoo-user] SSH authentication attempts - serious issue X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506 Date: Mon, 5 Jun 2006 11:36:19 -0500 Message-ID: <8D0AE50C52974F4AA9971F5C25A034596FC47A@murph.madison.local> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [gentoo-user] SSH authentication attempts - serious issue thread-index: AcaIvWeTyUExBfKsQAmJ3/KpshaKHgAAKD6Q From: "CR Little" To: X-Archives-Salt: df6688a0-d1d5-4d67-ab35-e29b99a8bf3c X-Archives-Hash: 2e8d78b8bace4bc0640f43b94d11b647 Do Programs like denyhosts work with other protocols? Such as POP or FTP? -----Original Message----- From: Joseph [mailto:syscon@interbaun.com] Sent: Monday, June 05, 2006 11:32 AM To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] SSH authentication attempts - serious issue Try port knocking. It is very effective. Your ssh port will be closed until you successfully hit certain number of ports and even though the ssh port will be open only to the IP address that successfully opened the port all others will see ssh port as closed. -- #Joseph On Mon, 2006-06-05 at 12:06 -0300, Leandro Melo de Sales wrote: > Hi, > > today when I was checking the server log I got many external > attempts to connect to my sshd service: > > ... > Jun 5 05:09:45 embedded sshd[4740]: Invalid user barbara from x.y.w.z > Jun 5 05:09:46 embedded sshd[4742]: Invalid user barb from x.y.w.z > Jun 5 05:09:48 embedded sshd[4744]: Invalid user barbie from x.y.w.z > Jun 5 05:09:50 embedded sshd[4746]: Invalid user barbra from x.y.w.z > Jun 5 05:09:51 embedded sshd[4748]: Invalid user barman from x.y.w.z > Jun 5 05:09:53 embedded sshd[4750]: Invalid user barney from x.y.w.z > ... -- gentoo-user@gentoo.org mailing list This message contains information from SourceLink - Madison which may be confidential and privileged. If you are not an intended recipient, please refrain from any disclosure, copying, distribution, or use of this information and note that such actions are prohibited. If you have received this transmission in error, please notify by email it-support@sourcelinkmadison.com. -- gentoo-user@gentoo.org mailing list