System Intrustion Detection

fbsd fbsd at a1poweruser.com
Tue May 9 15:14:54 UTC 2006


check the list archives.
this subject has been beat to death many times already

-----Original Message-----
From: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org]On Behalf Of M. Goodell
Sent: Tuesday, May 09, 2006 10:54 AM
To: FreeBSD Questions
Subject: System Intrustion Detection


More and more each day I am seeing my root emails contain hundreds
of entries like this:

  May  8 02:23:35 warpstone sshd[26092]: Failed password for root
from 222.185.245.208 port 50519 ssh2
May  8 16:37:41 warpstone ftpd[34713]: FTP LOGIN FAILED FROM
211.44.250.152, Administrator

  Basically, people are attemtpting to hack into my server often
with a few thousands of attempts each day. What measures can I take
to stop these attempts? Is there a way I can detect these attacks
and automatically cut them off? Are any of the security ports
effective against this?

  Thank you!

  M Goodell


---------------------------------
Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low
rates.
_______________________________________________
freebsd-questions at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at freebsd.org"



More information about the freebsd-questions mailing list