I just move the SSH port to something really far off the beaten path I used to get >2000+ failed attempts per day. I've had no problems with those (other than me mistyping my password), since then.
On 4/11/06, Wade Preston Shearer <[EMAIL PROTECTED]> wrote: > My server can get up ~12,000 [1] failed log in attempts recorded in > my server's logs in one day. How much of a concern should this be? I > am aware of restricting shell access to certain IPs. Will that > restrict the handshake or will I still see the attempts in my logs? > Are there any ways to restrict the attempts? > > > [1] Generally, ~3-20 on against standard system accounts (root, news, > squid, apache, etc), ~5,000 against unknown, and ~12,000 against > "unmated entries." > > > Wade Preston Shearer > > > > > > /* > PLUG: http://plug.org, #utah on irc.freenode.net > Unsubscribe: http://plug.org/mailman/options/plug > Don't fear the penguin. > */ > > > /* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
