OpenForum RSS: �� SSH ��

�� SSH �� (antonsdsd)

Wed, 09 Mar 2011 18:25:23 GMT

http://anton-lebedev.blogspot.com/2011/03/fail2ban.html

�� SSH �� (s_dog)

Fri, 03 Mar 2006 10:45:39 GMT

�� ;)

��:
http://www.opennet.ru/opennews/art.shtml?num=6945

http://www.howtoforge.com/preventing_ssh_dictionary_attacks_with_denyhosts

�� SSH �� (usama)

Fri, 03 Mar 2006 09:12:23 GMT

� �� :
� sshd.conf ��:
SysLogFacility AUTHPRIV

#!/usr/bin/perl

$log="Subject: IP banned\n";
%ban;

open(F, '< /var/log/secure');
while(<F>){
$str = $_;
$str=~/Failed password for .+ (.+) port/;
if(!$ban{$1}){ $ban{$1}=1; } else { $ban{$1}++; }
}
close(F);

open (BL, '>>/etc/rc.d/ban.ip');
foreach $key (keys %ban){
if($ban{$key} > 10 && $key){
print BL $key,"\n";
`iptables -I tcp_new -p tcp -s $key -j DROP`;
$log.="$key\n";
smtp_send('postmaster@inteh.com.ua', $log);
}
}
close(BL);

open(F, '> /var/log/secure');
print F "0";
close(F);

sub smtp_send{
local $m_addr=shift;
local $m_body=shift;
my $ret;
my $p;

use IO::Socket;
my $remote = IO::Socket::INET->new(PeerAddr => '212.40.43.98:25')
or die "Can't create socket";
$p.=<$remote>;
print $remote "helo inteh\n";
$p.=<$remote>;
print $remote "mail from: <krot-s\@mail.ru>\n";
$p.=<$remote>;
print $remote "rcpt to: <$m_addr>\n";
$p=<$remote>;
if($p=~/250/i

�� SSH �� (��)

Fri, 03 Mar 2006 07:26:07 GMT

>��!
>� �� - ��
>SSH � �� "��" ��/�� (�� ). � ��
>�� /�� , ��
>�� !
>�� ? �� - ��
>�� IP. �� SSH?
>
>��!
>HAN

�� .
�� AllowUsers � sshd_config
�� .

�� SSH �� (satelit)

Fri, 03 Mar 2006 02:41:29 GMT

>��!
>� �� - ��
>SSH � �� "��" ��/�� (�� ). � ��
>�� /�� , ��
>�� !
>�� ? �� - ��
>�� IP. �� SSH?
>
>��!
>HAN
1) �� (�� ).
2) �� SNORT, �� iptables �� (Patch-o-matic) �� .
3) �� .

�� SSH �� (vt)

Thu, 02 Mar 2006 20:35:38 GMT

>� �� - ��
>SSH � �� "��" ��/�� (�� ).
>�� ? �� - ��
>�� IP. �� SSH?

�� sshd - ��.
�� iptables - ��:
http://www.opennet.ru/tips/sml/41.shtml
http://www.swisspowered.net/wiki/index.php/Networking:Brute_force_SSH

SSH (Gennadi)

Thu, 02 Mar 2006 19:05:01 GMT

>>�� 22 ��
>>
>>� �� SSH �� , ��
>>�� (��) ��.
>
>� ��
>�� IP ��

�� ....

http://gennadi.dyn.ee/27.html

SSH (HAN)

Thu, 02 Mar 2006 16:49:01 GMT

>�� 22 ��
>
>� �� SSH �� , ��
>�� (��) ��.

� �� IP ��

SSH (3.14PA)

Thu, 02 Mar 2006 15:16:35 GMT

� �� FreeBSD 5.4
xl0 - ��

� �� :

rc.firewall

{fwcmd} add 1 reject all from any to me dst-port 22 in via xl0

�� 22 ��
� �� SSH �� , �� (��) ��.

OpenForum RSS: ������������� ����� SSH ���������

������������� ����� SSH ��������� (antonsdsd)

������������� ����� SSH ��������� (s_dog)

������������� ����� SSH ��������� (usama)

������������� ����� SSH ��������� (������)

������������� ����� SSH ��������� (satelit)

������������� ����� SSH ��������� (vt)