Someone is trying to break into my server.

Apr 14 00:04:05 Bobbie sshd[15382]: reverse mapping checking getaddrinfo for hos
t-84-44-16-28.borusantelekom.com failed - POSSIBLE BREAKIN ATTEMPT!

I got this a few days after I got pages and pages of this:

Apr 13 07:10:04 Bobbie sshd[6946]: Did not receive identification string from ::
ffff:209.160.43.47
Apr 13 07:38:58 Bobbie sshd[7179]: Did not receive identification string from ::
ffff:59.41.39.115
Apr 13 07:45:17 Bobbie sshd[7232]: Failed password for root from ::ffff:59.41.39
.115 port 50871 ssh2
Apr 13 07:45:22 Bobbie sshd[7234]: Failed password for root from ::ffff:59.41.39
.115 port 51123 ssh2

What can I do to protect myself? This isn't any kind of critical server, I just use it to learn things on, but still, I don't want someone in there that I havn't authorized...

4/14/2006 3:26:31 PM

block the ip addresses

4/14/2006 3:28:39 PM

59.41.39.115 is an Australian IP

4/14/2006 3:29:22 PM

Quote :

"block the ip addresses"

4/14/2006 3:44:49 PM

So long as you have a relatively strong ssh password, I wouldn't be too worried about it. Shit happens ur'day.

4/14/2006 4:03:45 PM

If you're running an open ssh server, you'll get a lot of that ... I'd personally just throw it on another port and ensure that your passwords on the box are non-trivial...

4/14/2006 4:35:52 PM

limit the number of retries from an ip

4/15/2006 11:31:50 AM