Skip to main content

problem in /var/log/secure

More
16 years 6 months ago #23596 by anu2
hello,
Please help me to block following attack

Output of securelog file is as follows

1) Failed password for invalid user fluffy from ::ffff:222.90.65.251 port 15646 ssh2
2) reverse mapping checking getaddrinfo for 82-78-37-18.rdsnet.ro failed - POSSIBLE BREAKIN ATTEMPT!

Anu

System administrator
More
16 years 6 months ago #23628 by pfunix
try this script

www.novell.com/coolsolutions/tools/19769.html

the script filters ssh invalid traffic and blocks them via hosts.deny

bsd solution

www.freebsdwiki.net/index.php/Block_repe...or_failed_SSH_logins


goodluck
-pf
Time to create page: 0.139 seconds