GoFuckYourself.com - Adult Webmaster Forum

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)

- Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)

- - SSHD Worm? (https://gfy.com/showthread.php?t=622098)

mrkris

06-15-2006 07:15 PM

SSHD Worm?

There must be some sort of brute force worm on the launch (again). I noticed a rapid increase of attacks on one of my servers. 4,110 attempts from just ONE IP. 22,553 attempts total so far today. Anyone else experiencing an above average amount of attempts today as well?

flashbang

06-15-2006 07:16 PM

no, we haev secured our SSH back in 1998, please hire a system admin... or did they all become donut bakers because everyone things they are one these days

and yes I am in a fucking bad mood today

mrkris

06-15-2006 07:18 PM

lol, i know my way around security fairly well to be honest. i already fixed it as well as i could with packet filters, but i can only do so much without access to the router/firewall

Spudstr

06-15-2006 07:41 PM

ipfw works wonders.. as well does changing default port that ssh sits on..

mrkris

06-15-2006 08:03 PM

Quote:

Originally Posted by Spudstr

ipfw works wonders.. as well does changing default port that ssh sits on..

changing ports works, edited /etc/hosts.allow -- by the way, PF > IPFW :winkwink:

All times are GMT -7. The time now is 07:16 PM.