Finally got tired enough of getting huge log files of SSH brute force attempts on all my machines. I tried several solutions, daily cron scripts, iptables (some machines don't have iptables installed) using the recent module, and a few other specious solutions but none of them did everything that I wanted across all the platforms and OS versions that we have running here and at the office for far too many reasons worth listing. So where do I turn to? Java, of course... 5 minutes later I had a working program, another 10 minutes to add in some comments so my buddies can play around with it, and you can get a copy as well: SSHBruteForce.java. Also, I've been collecting a list of links to relevant threads and advisories and what not. I'll go ahead and put up what I have here:
Filed under: Computers
HOME, CONTACT, TWITTER |