brute force ssh attack

P. Thompson ptfedora at majordomo.thedacare.org
Sun May 8 02:50:52 UTC 2005


On Sat, 7 May 2005, Marko Vojinovic wrote:

> > I wrote a little script that adds an iptables rule to drop the attacking
> > ip address for an hour then remove the block.  An hour might be overkill,
> > but they never come back from the same address.

> Also, are you willing to share your script with us (I guess I could
> learn from it)?

Perhaps you could, I make no guarantees or boasts as to its function,
suitability for any purpose or overall cleverness.

I run it in a screen session as root, but it could be run in a variety of 
better ways.

http://rrcs-24-106-25-221.west.biz.rr.com/autoblock.pl




More information about the users mailing list