Brandon,

 

Thanks man, that was the exact app I was speaking of.. Glad to hear from and
old high school buddy! I've just moved back to Nashville, so I'll be
attending the NLUG meetings again, I hope to see you there!

 

Thanks again,

Sincerely,

Karl Haines

 

From: nlug-talk@googlegroups.com [mailto:nlug-t...@googlegroups.com] On
Behalf Of Brandon Valentine
Sent: Thursday, March 05, 2009 1:10 PM
To: nlug-talk@googlegroups.com
Subject: [nlug] Re: Bruteforce attack on my sshd

 

Denyhosts works great:

 

http://denyhosts.sourceforge.net/

On Thu, Mar 5, 2009 at 1:03 PM, karlhaines <k...@nashvilleproweb.com> wrote:


I'm getting crazy brute force attempts from some annoying hacker that
looks like this in my logs:

Jan 21 21:43:22 server sshd[16419]: Invalid user test from
221.238.19.46
Jan 21 21:43:22 server sshd[16421]: Invalid user brown from
221.238.19.46
Jan 21 21:43:23 server sshd[16424]: Invalid user liza from
221.238.19.46
Jan 21 21:43:24 server sshd[16426]: Invalid user lois from
221.238.19.46
Jan 21 21:43:24 server sshd[16428]: Invalid user tester from
221.238.19.46
Jan 21 21:43:24 server sshd[16429]: Invalid user cyan from
221.238.19.46
Jan 21 21:43:25 server sshd[16432]: Invalid user lizabeth from
221.238.19.46
Jan 21 21:43:26 server sshd[16434]: Invalid user lola from
221.238.19.46
Jan 21 21:43:26 server sshd[16436]: Invalid user tester from
221.238.19.46

I had this problem before and someone suggested an easy fix, some
little app I installed to block these guys, who has a better memory
than me that could point me to that app again?? Thanks.

Karl






-- 
Brandon D. Valentine
http://www.brandonvalentine.com




--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"NLUG" group.
To post to this group, send email to nlug-talk@googlegroups.com
To unsubscribe from this group, send email to 
nlug-talk+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/nlug-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to