[ale] Backtracking to an IP

Doug McNash dmcnash at charter.net
Wed Sep 8 21:11:28 EDT 2004


Ditto, I have been seeing this low intensity ssh attempts also for about
the same 6 weeks. The sources originate from all over the globe.

One of many threads discussing this can be found here:
http://forums.devshed.com/t169975/s.html

My solution:
I loaded the iptables patch-o-matic TARPIT target and send all addresses
I don't use to the pit. The worm, virus or whatever only makes one
attempt before it moves on with the tarpit in place.  It seems to have
dropped off this week.

On Wed, 2004-09-08 at 09:03, Nathan J. Underwood wrote:
> I suspect that I've been getting the same symptoms for about 6 weeks. 
> Failed login attempts on root, admin, nouser, guest, unknown, anonymous. 




More information about the Ale mailing list