Date:  Sat, 17 Mar 2007 07:24:00 +1100
From:  Greg Kuhnert <greg.kuhnert (at mark) theanchoragesylvania.com>
Subject:  [coba-e:09213] Re: dictionary attack
To:  "Ken Marcus - Precision Web Hosting, Inc." <kenmarcus (at mark) precisionweb.net>
Cc:  coba-e (at mark) bluequartz.org
Message-Id:  <45FAFCE0.6000404 (at mark) theanchoragesylvania.com>
In-Reply-To:  <02c901c7674e$63470fe0$6700a8c0@OfficeKen>
References:  <02c901c7674e$63470fe0$6700a8c0@OfficeKen>
X-Mail-Count: 09213

I dont as yet have something for pop3 / imap etc.... but it's on my 
radar. If you want something for SSH however, use bluelinq to go to 
http://bluelinq.gknsonline.com/

Note: This is not a YUM site... Use bluelink to download this module.

Regards,
Greg.


Ken Marcus - Precision Web Hosting, Inc. wrote:
> Does anyone know of a good scripts for blocking IPs with too many 
> authentication failures.
> 6128  attempts from this one IP.
>  
>  cat  /var/log/maillog | grep 99.72.131.83 -c
> 6128
>  
> Mar 15 14:22:53 blue92 dovecot: pop3-login: Aborted login: 
> user=<bebe>, method=PLAIN, rip=199.72.131.83
> Mar 15 14:22:53 blue92 dovecot: pop3-login: Aborted login: 
> user=<beatrice>, method=PLAIN, rip=199.72.131.83
>
>  
>  
> ----
> Ken Marcus
> Precision Web Hosting, Inc.
> http://www.precisionweb.net
>  
>  
>  
>
> -- 
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean. 


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.