Re: What Can You Do?

[David Gibbs <david@xxxxxxxxxxxx>]

On 5/20/2015 2:01 PM, Rich Loeber wrote:
>     I regularly see and capture information about attempts to gain access to
>     my system.
[snip]
>     So, my question is, is there anything that you can do when you see this
>     kind of activity?  Is there any agency that would respond?

There's really not much you can do except make sure your systems are secure.

On my linux systems i see hundreds of dictionary attacks on my SSH, IMAP, PHP3, SMTP, and Wordpress servers every day.

I use a utility called fail2ban that automatically blocks the offending IP address for 2 weeks after it detects signs of an attack.

david