Re: How do you handle invalid ssh logins?

"Jim G" <jgrago@xxxxxxxxxxxxxxxxxxx> writes:

With all the wanna be hackers running these ssh scripts to try to find
no password accounts or default passwords, how do you handle these
people? I use a program called fail2ban (Python script) that works
well by blocking the ip for 15 minutes on 4 invalid ssh logins. I have
also tried changing the port that ssh listens on to 10022. That works
well but I found that I have issues using sftp to my other servers.

Let me know how you handle these people and if you are successful.

Hi Jim,

Regarding sftp, I've used scp -P portnumber (instead) with good success.
--
% Randy Yates % "...the answer lies within your soul
%% Fuquay-Varina, NC % 'cause no one knows which side
%%% 919-577-9882 % the coin will fall."
%%%% <yates@xxxxxxxx> % 'Big Wheels', *Out of the Blue*, ELO
http://www.digitalsignallabs.com
.