[ale] [OT] Chinese brute-force network?

JD jdp at algoloma.com
Thu May 29 18:18:54 EDT 2014


On 05/29/2014 04:03 PM, Dustin Strickland wrote:
> grep 116.10.191. /var/log/auth.log

I don't run ssh on the default port.  Just use the router port-translation and
99.999999% of this stuff will go away.  Then you can also install either
fail2ban or denyhosts to firewall off repeated attempts from the same IP.

It isn't like you allow password-based logins over the internet anyway.  That
would just be crazy.


More information about the Ale mailing list