[svlug] What to do about ssh hack attempts?

[Jeff Walter]

Jon Zweig wrote:
> Besides disabling root login, is there anything I ought to be doing
> about this? Is there a way to harden against these ip addresses?

     Personally, I block SSH access from all of China, which has eliminated 
around 60% of all SSH attacks.  Aside from that I also block hosts which are the 
source of more than 50 failures in any 20 minute period.  Works pretty well.

--
Jeff Walter