Re: More SSH 'trolling'

[Greg Lobring <globring gmail com>]

On Thu, 14 Oct 2004 08:33:34 -0500, Allan R. Batteiger <arb rtsi com> wrote:
> Yes my logs reflect about 100 attempts a day from various IP addresses.
>  So far I have been sending complaints to the admin of the domains the
> attempts come from.  I have received positive responses from a couple of
> them since they were ISPs and do not condone this type of behavior.  I
> generally grep the secure log file and send that to the admin of the
> domain.  Of course all of the "standard" lock down precautions have been
> taken on my server.

For those of us not so savvy, can you tell me where those logs are
located and what they are named so I can see if I am experiencing the
same? Also, what are the "standard" lock down precautions to be taken?