[Discuss] Reading logwatch e-mails

[Rich Pieri]

On Wed, 12 Jun 2024 09:09:17 -0700
Kent Borg <kentborg at borg.org> wrote:

> I recently started actually looking at logwatch e-mails I had been 
> ignoring. These machines have sshd listening on the open internet,
> and man, there are a lot of failed ssh logins.

Fastest I've seen a new machine starting to get attacked by brute force
like this is about 3 minutes.

fail2ban goes a long way to shutting these down.

-- 
\m/ (--) \m/