1 week into the month…
..and the bots are going crazy:
-bash-3.2# cat /var/log/secure | grep "Failed password" | wc -l
72595
72 thousand invalid password attempts (most of those are against root, although theres a lot for <random 5 character usernames>).
Thats 10,000 a day, about one every 10 seconds..
I actually grabbed those logs yesterday to do some analysis. It’s probably just one of the distributed ssh attack botnets….. :/
Woah!
http://www.denyhosts.net
;)
I use a plugin called “Limit Login Attempts”. Locks out people if they fail X times for X minutes…
http://wordpress.org/extend/plugins/limit-login-attempts/
So far I’ve only locked myself out once! ;)
- Alex