Automated SSH attacks

Jerry McBride mcbrides9 at comcast.net
Fri Jul 31 12:45:45 PDT 2009


On Thursday 30 July 2009 09:22:55 pm david.bandel at gmail.com wrote:
> Folks,
>
> Well, I think I hit another milestone yesterday.  I had one firewall at a
> client site that logged 66,352 login attempts (bad user or password) during
> the 24 hours from 29-30 July.  That's nearly one attack per second all day
> and all night long.  It's filling my syslog sql database log.  Gonna have
> to purge some of the older syslog entries and vacuum the database.
>
> I remember when 6 attacks a night was a lot.
>
> Ciao,
>
> David A. Bandel

David,

Just curious... how are you getting firewall notices into an sql database? 


Jerry






More information about the Linux-users mailing list