A brute force attack is an attempt to log into a secure system by making lots of attempts in the hopes of eventual success. It’s not a sophisticated type of attack, hence the name "brute force." For example, if you have a login process that requires a username and password, there is a limit as to the possible number of username/password combinations.

This technique, use iptables to block a particular IP, that has passed the threshold of a certain number of connections in a given period of time. This only uses IPtables and not DenyHost nor Fail2Ban

One of the most popular articles on this blog is Five-Minutes to a More Secure SSH. My impetus for writing it was seeing too many client’s servers left in a default state where they are vulnerable to brute-force attacks. In it, I basically advocate three things...

In this article I will show how to prevent brute force attacks with Fail2ban against your SquirrelMail Web login using the Squirrel Logger plugin.

pam_abl provides auto blacklisting of hosts and users responsible for repeated failed authentication attempts. Generally configured so that blacklisted users still see normal login prompts but are guaranteed to fail to authenticate.

There are some basic security steps that you can do to protect SSH, such as change the port from the ssh, and install a script as denyhosts.

Attackers targeted the open source foundation's issue tracker with XSS and brute force password attacks and were able to gain root access to the system and to hashed passwords stored on it for Confluence and Bugzilla. Atlassian was also targeted

In this article I will show how to install and configure BlockHosts on a Debian Etch system. BlockHosts is a Python tool that observes login attempts to various services, e.g. SSH, FTP, etc., and if it finds failed login attempts again and again from the same IP address or host, it stops further login attempts from that IP address/host.

SSH is a great way to remotely administer a server. However, it still has a number of issues when you open it up to the world. The server and client communications are secure but that doesn’t mean the hosts involved are. Opening an SSH service to the world allows for brute force attacks and means that the carbon interface is still the weakest link.