I never run ssh on the standard port 22 anymore..... changing the port number alone will significantly reduce the number of logged attacks. <br><br>Dave Crouse<br><br><br><br><br><div class="gmail_quote">On Tue, May 13, 2008 at 11:49 AM, Kendall Bailey <<a href="mailto:krbailey@gmail.com">krbailey@gmail.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">I run an SSH server on port 22 as my only public service. I run the<br>
denyhosts daemon to protect against dictionary attacks and lock down<br>
SSH pretty thoroughly in other regards, but still allow connection<br>
from any host otherwise. The last few days I've seen hundreds of<br>
hosts logged by denyhosts. Anyone know why random dictionary attacks<br>
might be spiking? Is it widespread? I'm considering closing that<br>
port for a while.<br>
<br>
Thanks.<br>
Kendall<br>
_______________________________________________<br>
Cialug mailing list<br>
<a href="mailto:Cialug@cialug.org">Cialug@cialug.org</a><br>
<a href="http://cialug.org/mailman/listinfo/cialug" target="_blank">http://cialug.org/mailman/listinfo/cialug</a><br>
</blockquote></div><br>