Archives for: May 2006
05/02/06
DenyHosts
A bruteforce attack is an attempt at getting past a login request by repeatedly entering combinations of words, letters, and numbers found in a dictionary file created by the attacker. Blocking these attacks may seem unnecessary for a system administrator with a complex password; however, putting a stop to them not only keeps your system more secure but it will save bandwidth in the long run and also cut down on those lengthy login failed security e-mails.
DenyHosts is a wonderful tool for blocking these bruteforce attacks on your SSH daemon. It works by scanning through your authlog, finding the IPs that constantly try to enter your server and fail, and then denying them SSH access to the server.