Re: Block SSH brute force

[Tim Bronski <tim.bronski@xxxxxxxxx>]

This soft of attempted hack is very common and they emanate from China, 
Korea, Ukraine...all the usual suspects. If I fire up an SSH server and 
monitor the requests I will usually see about 3 or so attacks a day with 
each of these performing several hundred login attempts as root with a 
dictionary of possible passwords. The simplest way to prevent it (aside 
from firewall blocking) is to run your server on a port other than 22.

On 2/11/2016 4:40 PM, rob@xxxxxxxxx wrote:
> Most of the attacks we get like this are from the benevolent hackers
> working as a subsidiary of IBM.  Testing common passwords, etc.  You don't
> contract to such a service, do you?
>
> IDK of any way to autoblacklist based on log in profile.
>
>
> Rob Berendt