PDA

View Full Version : Possible break-in attempt!


stefki
23rd March 2009, 01:50
HI i`m running a Debian Server as well but i got a lot of attacks on my SSH port

reverse mapping checking getaddrinfo for 89.**** failed - POSSIBLE BREAK-IN ATTEMPT!

Mar 23 22:39:21 dserver sshd[2340]: subsystem request for sftp
Mar 23 22:39:21 dserver sshd[2342]: (pam_unix) session opened for user root by (uid=0)
my port SSH is not 22 i have changed, but i still have attacks, does anybody know how to protect from this ?

falko
23rd March 2009, 19:47
You can install fail2ban or DenyHosts to prevent brute-force attacks.