brute force ssh attack
P. Thompson
ptfedora at majordomo.thedacare.org
Sun May 8 02:50:52 UTC 2005
On Sat, 7 May 2005, Marko Vojinovic wrote:
> > I wrote a little script that adds an iptables rule to drop the attacking
> > ip address for an hour then remove the block. An hour might be overkill,
> > but they never come back from the same address.
> Also, are you willing to share your script with us (I guess I could
> learn from it)?
Perhaps you could, I make no guarantees or boasts as to its function,
suitability for any purpose or overall cleverness.
I run it in a screen session as root, but it could be run in a variety of
better ways.
http://rrcs-24-106-25-221.west.biz.rr.com/autoblock.pl
More information about the users
mailing list