Attacks on ssh port

Willem Jan Withagen wjw at withagen.nl
Sat Sep 18 05:18:36 PDT 2004


Hi,

Is there a security problem with ssh that I've missed???
Ik keep getting these hords of:   
    Failed password for root from 69.242.5.195 port 39239 ssh2
with all kinds of different source addresses.

They have a shot or 15 and then they are of again, but a little later on 
they're back and keep clogging my logs.
Is there a "easy" way of getting these ip-numbers added to the 
blocking-list of ipfw??

Thanx,
--WjW



More information about the freebsd-security mailing list