massive ssh login attempts
Hi
When I check my authlog it's filled with ssh login attempts, mostly from China and Malaysia. It constantly filles up with failed logins for diffrent random users including root. I think it's around 600/day...
Is this normal for a home server?
It's an OpenBSD 5.1 box, what is your toughts on the best way to protects your server from these massive attacks? Should I block IP adresses with more than 3 attempts for 24 hours?
|