From owner-freebsd-security@FreeBSD.ORG  Sat Sep 18 12:25:16 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1296A16A4CE
	for <freebsd-security@freebsd.org>;
	Sat, 18 Sep 2004 12:25:16 +0000 (GMT)
Received: from mproxy.gmail.com (rproxy.gmail.com [64.233.170.197])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BC0D043D49
	for <freebsd-security@freebsd.org>;
	Sat, 18 Sep 2004 12:25:15 +0000 (GMT)
	(envelope-from zparta@gmail.com)
Received: by mproxy.gmail.com with SMTP id 74so361659rnk
	for <freebsd-security@freebsd.org>;
	Sat, 18 Sep 2004 05:25:11 -0700 (PDT)
Received: by 10.38.125.2 with SMTP id x2mr652801rnc;
        Sat, 18 Sep 2004 05:25:11 -0700 (PDT)
Received: by 10.38.9.18 with HTTP; Sat, 18 Sep 2004 05:25:11 -0700 (PDT)
Message-ID: <3b41db8504091805257f380bd4@mail.gmail.com>
Date: Sat, 18 Sep 2004 14:25:11 +0200
From: Jens Holmqvist <zparta@gmail.com>
To: "freebsd-security@FreeBSD.ORG" <freebsd-security@freebsd.org>
In-Reply-To: <414C2798.7060509@withagen.nl>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
References: <414C2798.7060509@withagen.nl>
Subject: Re: Attacks on ssh port
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Jens Holmqvist <zparta@gmail.com>
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 18 Sep 2004 12:25:16 -0000

i have the same problem and they also try the users test and admin
which doesnt even exist and its alot every day

sorry willem just sent it to you earlier not used to gmail that much :)

On Sat, 18 Sep 2004 14:18:32 +0200, Willem Jan Withagen <wjw@withagen.nl> wrote:
> Hi,
> 
> Is there a security problem with ssh that I've missed???
> Ik keep getting these hords of:
>     Failed password for root from 69.242.5.195 port 39239 ssh2
> with all kinds of different source addresses.
> 
> They have a shot or 15 and then they are of again, but a little later on
> they're back and keep clogging my logs.
> Is there a "easy" way of getting these ip-numbers added to the
> blocking-list of ipfw??
> 
> Thanx,
> --WjW
> 
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
>