OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: "ssh" attacks

From: A. Khattri (ajaibway.net)
Date: Wed May 31 2006 - 15:50:15 CDT


On Wed, 31 May 2006, Peter Fraser wrote:

> Expect I was not clear.
>
> Someone is attacking address 1, address 2, address 3, those
> address are all blocked with respect to ssh. , but because he
> is attacking those addresses, I want to stop an expected attack
> on address 4. I never want to pass ssh on address 1, address 2
> or address 3 ever, I want to use the information that someone
> was trying to ssh to those address to identify person as
> an attacker.

Have a look at "denyhosts" (Google for that).

--
A