[ale] failed ssh login attempts
    Jim Lynch 
    jwl at sgi.com
       
    Fri Feb 11 15:23:38 EST 2005
    
    
  
What someone really needs to do is write a ssh spoofing daemon to accept 
any user and any password and let them think they've logged in.  If 
there were enough out there, maybe it would keep the chaps busy sorting 
the spoofs from reality.
Jim.
Jason Fritcher wrote:
> Googi Singha wrote:
>
>> Most of these scan tools seem to use cleartext passwords. If you enable
>> keys and also follow hints such as the ones below - you should be pretty
>> safe.
>
>
> I went one step further and turned off password authentication 
> altogether. Now I don't even see the attempt messages in the logs. :)
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Ale mailing list
>Ale at ale.org
>http://www.ale.org/mailman/listinfo/ale
>
    
    
More information about the Ale
mailing list