[Cialug] denyhosts logging LOTS of attacks

Kendall Bailey krbailey at gmail.com
Tue May 13 11:49:28 CDT 2008


I run an SSH server on port 22 as my only public service.  I run the
denyhosts daemon to protect against dictionary attacks and lock down
SSH pretty thoroughly in other regards, but still allow connection
from any host otherwise.  The last few days I've seen hundreds of
hosts logged by denyhosts.  Anyone know why random dictionary attacks
might be spiking?  Is it widespread?  I'm considering closing that
port for a while.

Thanks.
Kendall


More information about the Cialug mailing list