shh bruteforce attacks - Community & Forums Related Discussions

Users browsing this thread: 2 Guest(s)
Amzo
Members
These attacks aren't targeted at anyone specifically, rather it's automated programs searching a range of IP addresses and brute forcing them.

However, if you use weak passwords, I would change them and add some Iptable rules to filter any bruteforcing.

The majority of these brute force attempts originate from china and have been caught by some honey pots.

Code:
ptables -A INPUT -p tcp --dport 22 -m recent --set --name ssh --rsource
iptables -A INPUT -p tcp --dport 22 -m recent ! --rcheck --seconds 60 --hitcount 4 --name ssh --rsource -j ACCEPT


Messages In This Thread
shh bruteforce attacks - by vompatti - 20-11-2012, 05:40 AM
RE: shh bruteforce attacks - by Amzo - 20-11-2012, 05:46 AM
RE: shh bruteforce attacks - by jmbi - 20-11-2012, 09:29 PM
RE: shh bruteforce attacks - by venam - 21-11-2012, 04:59 AM
RE: shh bruteforce attacks - by Amzo - 21-11-2012, 10:58 AM
RE: shh bruteforce attacks - by jolia - 23-11-2012, 04:16 PM
RE: shh bruteforce attacks - by jmbi - 03-12-2012, 07:54 PM
RE: shh bruteforce attacks - by jmbi - 03-12-2012, 10:32 PM
RE: shh bruteforce attacks - by Dritz - 04-12-2012, 12:28 AM
RE: shh bruteforce attacks - by venam - 04-12-2012, 03:40 AM
RE: shh bruteforce attacks - by jmbi - 04-12-2012, 06:51 PM
RE: shh bruteforce attacks - by gurhush - 05-12-2012, 01:41 PM