On Wed, Oct 13, 2004 at 10:41:10AM +0530, Asit Vadhavkar wrote:
For past few weeks I have noticed increased attempts to connect to my box through ssh. Has anyone else noticed it before? Its averaging at over 150 per day.
We've been noticing this for several weeks. Unfortunately, it's "normal". Ignore it. Make sure your passwords are secure. Don't allow root login over ssh. Restrict access by IP ranges if you can. Put your ssh daemon on a non-standard port if that floats your boat. Use key access instead of passwords if you can get away with it.
150/day is a hell of a lot, though. My peak has been about 15/day.