Re: Massiv dictionary attacks from <rackspace.com>

Andika Triwidada wrote at 2012-08-14 06:50 -0500:
> On Tue, Aug 14, 2012 at 6:43 PM, Michelle Konzack
> <[email protected]> wrote:
> >
> > Hello Colleges and *,
> >
> > since Sunday 19:47 CEST 18 of my servers are under heavy attack.
> >
> > Currently I have counted over  18  million  login  attempts  (dictionary
> > attack) with a list of 1005 names an started with IP <50.56.180.220>.
> 
> Any reason not to use fail2ban or any similar tool to prevent those
> brute force attacks?

I think fail2ban does not yet support ipv6; the iptables recent module might 
do an adequate job without requiring extra software (limit number of new 
connection attempts from a specific IP per n seconds).

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlAqYXwACgkQ682C+dBP+oQMkwCfew2tpczTM6fu+NnU50Ob9bqc
jGAAoOOUYcpQYNKdMktQ2BydYdcRkHWP
=ofqD
-----END PGP SIGNATURE-----