Dark reading article on the proper port of SSH daemon.

Nikolas Lam nlam87346 at library.usyd.edu.au
Tue Dec 9 05:43:33 UTC 2008


On Mon, 2008-12-08 at 21:31 -0800, Jose R R wrote:
...
> I am also looking for insight/recommendations on an utility to stop
> scraping/resource probing like abuses, where an given perpetrator will
> start at the root of the web resources and continue for several
> minutes traversing the whole site(s).

Check out fail2ban - it monitors your logs and modifies your iptables
entries to block likely abusers for a fixed period (all configurable).
I've found it highly affective against bulk automated brute-force
attacks.

Nik






More information about the redhat-list mailing list