[conspire] Ongoing dictionary attacks on SSH daemons

Rick Moen rick at linuxmafia.com
Fri Oct 1 10:49:50 PDT 2004


Quoting Daniel Gimpelevich (daniel at gimpelevich.san-francisco.ca.us):

> Gee, and when I got attacked, the only thing that appeared in the log was:
> Sep 11 06:02:50 localhost sshd[13185]: fatal: Timeout before authentication for 212.48.164.71.

Well, logcheck does fairly extensive log analysis, so you see things
with it that you otherwise might not.




More information about the conspire mailing list