Linode Forum
https://forum.linode.com/

Brute force attacks
https://forum.linode.com/viewtopic.php?f=19&t=1323
Page 1 of 1

Author:  infinet [ Thu Dec 02, 2004 8:20 pm ]
Post subject:  Brute force attacks

Hello all,

I guess I am very concerned about my log watches today. Usually I get several failed attempts from various ip addresses, nothing that I would classify as severe.... But today I found this tid bit in my log watch (See below). The question is now; is there some reporting proceedure that I should follow in reporting this address to someone, also are there any steps I can take to prevent anymore of this??


sshd:
Authentication Failures:
root (hnd01.aspwb.com ): 560 Time(s)
root (203.69.243.102 ): 1 Time(s)


Failed password for root from ::ffff:202.227.184.84 port 48570 ssh2
Failed password for root from ::ffff:202.227.184.84 port 48755 ssh2
Failed password for root from ::ffff:202.227.184.84 port 48947 ssh2
Failed password for root from ::ffff:202.227.184.84 port 49136 ssh2
Failed password for root from ::ffff:202.227.184.84 port 49341 ssh2
**< Snipped because I think you see where this is going>**

Author:  tierra [ Thu Dec 02, 2004 8:59 pm ]
Post subject: 

http://www.linode.com/forums/viewtopic. ... torder=asc

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/