one of them use valid usernames for this
box.
In my opinion it's not worth getting worked up about.
If you are worried about *targeted* dictionary attacks, i.e.
someone going for *you* with thousands of passwords, rather
than thousands of machines with a handful of weak passwords,
then Fail2Ban makes sense. Or just make sure you have strong
passwords. Or switch to keys.
From mike@??? Thu May 10 18:39:03 2012
Received: from mail-ey0-f176.google.com ([209.85.215.176])
by mail.bitfolk.com with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16)
(Exim 4.72) (envelope-from <mike@???>) id 1SSYGV-0005ec-Jp
for users@???; Thu, 10 May 2012 18:39:03 +0000
Received: by eaab16 with SMTP id b16so871357eaa.21
for <users@???>; Thu, 10 May 2012 11:38:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zanker.org; s=google;
h=message-id:date:from:user-agent:mime-version:to:subject:references
:in-reply-to:content-type:content-transfer-encoding;
bh=BtuGyI+4LPsG1TAa0G8bMnsTm5Pa4ImDwPDDaxFd6is=;
b=eq5QBLeuJcR2L58TiY00ByH3OZfbWsh7jwCWSXbbCDL8MF5gQBzwEuzscdvHLUfvW5
Bsj7Bw/ggQ5S+cuAVejaDaNJGYur24hupW0Q+InO+tKXbwaoJmpzLt049FUhauvBZmK1
YWXkmskcNFRV5kk4yN79NCHK1itx29Ro5N3wM=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20120113;
h=message-id:date:from:user-agent:mime-version:to:subject:references
:in-reply-to:content-type:content-transfer-encoding
:x-gm-message-state;
bh=BtuGyI+4LPsG1TAa0G8bMnsTm5Pa4ImDwPDDaxFd6is=;
b=evOOtKK8zR0t1rwHbQt2kEsfMT8T7zaitLKy4mMSKGFS7HsKhRhfbj3I+od0rDwgqq
z2jVhkUKm6ZLjqrXiHHMPNRknnEC+7+Fvt7qByDFoFcDYnowOhYLnbqNrEsbZiujjWM6
oP/wgy/E3sP1AKbwBU/AXfCAXzDDj5yvkKpVd3bqNaIImmwxNbRxI8L3wLzJJHBWlhPp
qHg8br1cGV4x78sIfnSFN3RSyONCFSzYA2y/MPGiyDH1wJHdqyRkqsoJe2SN99K1efmJ
kHtTwni8/1avP80Oni6wgDULR2wNGj6wjt2EvzZZW8mfaYSLUmtr2KGee80Z7FEPH3ki
op1g==
Received: by 10.14.37.79 with SMTP id x55mr1089873eea.109.1336675137576;
Thu, 10 May 2012 11:38:57 -0700 (PDT)
Received: from [192.168.1.34] (wan-gw.zanker.org. [95.172.230.183])
by mx.google.com with ESMTPS id s54sm32861427eeb.4.2012.05.10.11.38.55
(version=SSLv3 cipher=OTHER); Thu, 10 May 2012 11:38:56 -0700 (PDT)
Message-ID: <4FAC0B3E.3020803@???>
Date: Thu, 10 May 2012 19:38:54 +0100
From: Mike Zanker <mike@???>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
rv:12.0) Gecko/20120428 Thunderbird/12.0.1
MIME-Version: 1.0
To: users@???
References: <20120510162331.GG12360@???>
<20120510175044.29f33d38@derek> <4FABFC8F.5060407@???>
In-Reply-To: <4FABFC8F.5060407@???>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Gm-Message-State: ALoCoQm4yS+Io3hWoYhTbYNEJO2hLft1gErQ7zVtnyXUPkx/VLKur3+ssrc8C/F9+YbPlsoUHg4Y
X-Virus-Scanner: Scanned by ClamAV on mail.bitfolk.com at Thu,
10 May 2012 18:39:03 +0000
X-SA-Exim-Connect-IP: 209.85.215.176
X-SA-Exim-Mail-From: mike@???
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
spamd1.lon.bitfolk.com
X-Spam-Level:
X-Spam-ASN: AS15169 209.85.128.0/17
X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU, RCVD_IN_DNSWL_LOW,
SPF_PASS shortcircuit=no autolearn=disabled version=3.3.1
X-Spam-Report: * -0.0 SPF_PASS SPF: sender matches SPF record
* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's * domain
* -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/,
low * trust
* [209.85.215.176 listed in list.dnswl.org]
X-SA-Exim-Version: 4.2.1 (built Mon, 22 Mar 2010 06:51:10 +0000)
X-SA-Exim-Scanned: Yes (on mail.bitfolk.com)
Subject: Re: [bitfolk] A gentle reminder again about protecting against SSH
dictionary attacks
X-BeenThere: users@???
X-Mailman-Version: 2.1.13
Precedence: list
List-Id: Users of BitFolk hosting <users.lists.bitfolk.com>
List-Unsubscribe: <https://lists.bitfolk.com/mailman/options/users>,
<mailto:users-request@lists.bitfolk.com?subject=unsubscribe>
List-Archive: <http://lists.bitfolk.com/lurker/list/users.html>
List-Post: <mailto:users@lists.bitfolk.com>
List-Help: <mailto:users-request@lists.bitfolk.com?subject=help>
List-Subscribe: <https://lists.bitfolk.com/mailman/listinfo/users>,
<mailto:users-request@lists.bitfolk.com?subject=subscribe>
X-List-Received-Date: Thu, 10 May 2012 18:39:03 -0000
On 10/05/2012 18:36, Dom La
