Does anyone else see an increase of brute force hacking attempts?
 

Whenever I check my logs I see daily hacking attempts. Hacking of sites (mostly IIS attacks) but since 2 month or so a big increase of people trying to hack into ssh.

I am not scared of those people I see in my logs but of the people I don't see.

Does anyone else see such ssh attacks where people simply try passwords for admin and root?

Ive seen a script somewhere that will lock out the user by IP. It sets ssh to a different port. All the brute force attempts are done on the normal 22. So they all get blocked. Not sure on the name.