[NTLUG:Discuss] SSH Dictionary Attacks

[Thomas Cameron]

On Sun, 2006-01-01 at 01:05 -0600, Neil Aggarwal wrote:
> Thomas:
> 
> Thank you for this post!  I am going to add this to my
> firewall rules.
> 
> Do you report the attacks to the ISP that manages the IP
> that attacked you?

Nope.

> Every time we get an attack on a sever, we report it to the
> ISP responsible, but so far have not seen any effect of doing 
> so.

Me, either.  Which is why I don't waste my time reporting them any more.
No one cares.  As long as their customers make their monthly payments,
the vast majority of ISPs don't seem to care what their customers do.
Many ISPs will make token attempts to curb spam (usually in the dumbest
way possible), but they don't seem to do anything about individual
offenders.

TC