[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Attacker IP database

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] Attacker IP database
From: Marina Brown <catskillmarina@xxxxxxxxx>
Date: Fri, 02 Aug 2013 18:54:01 -0400
Delivered-to: archiver@xxxxxxxx
Delivery-date: Fri, 02 Aug 2013 18:56:36 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:x-enigmail-version:content-type :content-transfer-encoding; bh=ESWFkTlrNCskLelMPpsZ1m+ikO6zLuRC1kOi9W1gY9g=; b=Z3NEXgClZig/14mc4sC25Q42sFafL3a8cKJJ8oke4njd6pd9JRT46Iws+KaTFuYbFQ V83dlRqaZIgbpX5X46uNQTFeRdzRjazR/7TK13KTCcypa6Ky5Rf1MTGc3l8QLztpLVJy UCGComn9nuDg+24xjljRu5Ny0cazykefs4xkxcZFAmGqTO4QPpIYRNE9t5D0CqYj4PZp 0WDMLafW/EN1X9RS6yi55eEsFl6B+lxKKq1Knt1bxu76JiOr8SVkpxq6MunenmPydrGE ciSsKx6pHnRJ8TcCYhtls6G94OYnbN0BvkInnUao1eOOMBJfoRfm8VxVeWCH58ZdG2fq D0XQ==
In-reply-to: <20130802214450.GG27178@xxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <CA+zTX6+2v0GBP6aUcTb8WqJhaDZKhRJEz92WcrBRqL9b4mg4pw@xxxxxxxxxxxxxx> <51FC10D8.3090708@xxxxxxxxx> <CA+zTX6KjeZmAVCirGdA3bEU+Vnza48n_gjDH9-AUrxLDoGrDjg@xxxxxxxxxxxxxx> <20130802214450.GG27178@xxxxxxxxxxxxx>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.12) Gecko/20130116 Icedove/10.0.12

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/02/2013 05:44 PM, Andy Isaacson wrote:
> On Fri, Aug 02, 2013 at 03:25:10PM -0600, Bryan Carey wrote:
>> Thanks everyone for your input! I already had root access
>> disabled via sshd config. I will look into fail2ban as it sounds
>> like it remedies the problem I'm having.
> 
> I'm confused, what's the actual problem you're having?
> 
> Is the problem the log messages from sshd?  I just ignore them.
> Problem solved.
> 
> It's fairly odd, on the modern internet, to pretend that an attempt
> to guess your password is anything to worry about.  Think of these 
> attackers as soil bacteria -- if your immune system is so broken
> that you're vulnerable to such a trivial threat, you have no chance
> of surviving when a serious threat shows up, and your immediate
> demise is better for the species as a whole.
> 


I also disable password access only leaving ssh key. They can try all
they want but fail2ban will block them for a day with my settings.
Some resume attacking after ban time is up.

- --- Marina Brown


> -andy _______________________________________________ tor-relays
> mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx 
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=cYF3
-----END PGP SIGNATURE-----
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

References:
- [tor-relays] Attacker IP database
  - From: Bryan Carey
- Re: [tor-relays] Attacker IP database
  - From: Marina Brown
- Re: [tor-relays] Attacker IP database
  - From: Bryan Carey
- Re: [tor-relays] Attacker IP database
  - From: Andy Isaacson

Prev by Author: Re: [tor-relays] Attacker IP database
Next by Author: Re: [tor-relays] new relays
Previous by thread: Re: [tor-relays] Attacker IP database
Next by thread: Re: [tor-relays] Attacker IP database
Index(es):
- Author
- Thread