On 12/24/2014 2:48 PM, Danny wrote: > Hi Guys, > > As a matter of interest, after I installed fail2ban I got this on ssh: > > ################################################################################################### > Hi, > > The IP 122.225.109.103 has just been banned by Fail2Ban after > 3 attempts against ssh. > > <snip>
Not surprising. If you haven't been paying attention to your logs (you should ALWAYS monitor them if you are connected to the internet!), you haven't seen what has probably been going on for a long time. I've seen attacks start within hours of putting a new system on the internet. I see multiple attacks on my servers every day. So far today, the one I was talking about earlier has blocked another 33 attempts against ssh and one against POP3. Above average, but not terrible. Attacks seem to have increased in the last few days. Maybe the longer nights in the Northern hemisphere have given the hackers more time to spend on their nefarious activities. Jerry -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/549b7fa3.2050...@gmail.com
