Re: [tlug] attack via ssh? (don't panic :-P)

["Stephen J. Turnbull" <stephen@example.com>]

>>>>> "Nikolay" == Nikolay Elenkov <nick@example.com> writes:

    Nikolay> At one point I got tired of adding addresses to the
    Nikolay> firewall script and just moved sshd to a non-standard
    Nikolay> port. Not a real solution, but helps.

I've seen a trace of a port scanner that knew ftp, http, telnet, and
ssh protocol, at least enough to try to GET / via HTTP and attempt
logins on the other three.  So something smart enough to get past that
is already in the wild.

But it should help with the miscreants in question.

-- 
School of Systems and Information Engineering http://turnbull.sk.tsukuba.ac.jp
University of Tsukuba                    Tennodai 1-1-1 Tsukuba 305-8573 JAPAN
               Ask not how you can "do" free software business;
              ask what your business can "do for" free software.