[svlug] What to do about ssh hack attempts?
jeffw at gentoo.org
Wed Feb 1 08:18:53 PST 2006
Jon Zweig wrote:
> Besides disabling root login, is there anything I ought to be doing
> about this? Is there a way to harden against these ip addresses?
Personally, I block SSH access from all of China, which has eliminated
around 60% of all SSH attacks. Aside from that I also block hosts which are the
source of more than 50 failures in any 20 minute period. Works pretty well.
More information about the svlug