News for hackers. Stuff that matters.

A comment on Observations from two weeks of SSH brute force attacks. Parent comment

Re:Observations from two weeks of SSH brute force attacks by lloeki on Thursday January 26, 2012 @12:37PM (#3515048)
For brute forcing, without resorting to port knocking, fail2ban works well and has a pluggable system to handle more than ssh.
[ Parent | on HN ]
Re:Observations from two weeks of SSH brute force attacks by rlvesco7 on Thursday January 26, 2012 @04:26PM (#3516074)
Does fail2ban work against brute force distributed attacks?

I've noticed a few attacks that seem to be orchestrated from the same people but using different IPs.

[ Parent | on HN ]
Re:Observations from two weeks of SSH brute force attacks by nuclear_eclipse on Thursday January 26, 2012 @04:33PM (#3516094)
It doesn't specifically target distributed attacks, but I'm not really sure how something like that could know whether incoming requests are part of a botnet or ligitimate logins.
[ Parent | on HN ]