RE: [Fail2ban-users] Add fail2ban to your logwatch daily report

[Rarig, H. <hr...@so...>]

I guess if my one domain gets an average of one to three "robotic" =
attacks a day, then it would probably make sense that 50 domains hosted =
on one server could expect to see 50 to 150 attacks a day.

Sounds like we have come up with a good Internet Security "rule of =
thumb"!

(I just love tidy little formulas!)

Harry

-----Original Message-----
From: fai...@li...
[mailto:fai...@li...]On Behalf Of Nils
Breunese (Lemonbit Internet)
Sent: Friday, March 17, 2006 1:32 PM
To: fai...@li...
Subject: Re: [Fail2ban-users] Add fail2ban to your logwatch daily report


Harry Rarig wrote:

> Interesting....
>
> My website is a small one that I run for our Church.  Not well =20
> known or advertised, the community of interest tends to be small =20
> and localized.  Consequently, the pattern I see in my logfiles is =20
> that of "robots" running through dictionary attacks on SSH and =20
> FTP.  Only a few attacks a day.
>
> In your case, maybe you have larger community of interest, a =20
> popular server with many subscribers.  Perhaps your website appears =20
> on more of the lists used by the robots for attacks.  In addition, =20
> maybe some of your own subscribers are forgetting their correct =20
> usernames and passwords.

Our servers are shared hosting servers, hosting around 50 domains =20
each. None of my clients have shell access via SSH, only my company =20
has access to these servers.

Nils.


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting =
language
that extends applications into web and mobile media. Attend the live =
webcast
and join the prime developer group breaking into this new coding =
territory!
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D110944&bid=3D241720&dat=3D=
121642
_______________________________________________
Fail2ban-users mailing list
Fai...@li...
https://lists.sourceforge.net/lists/listinfo/fail2ban-users