The Heathen Chinee were pretty active yesterday. I banned four IPs trying to conduct dictionary attacks over ssh.
Many, many thanks to Badanov, JFM, and kbk for the tips on securing the server. I'm guessing the guys I banned were also the guys who were swarming the server when Apache overloaded. Eventually I'll (we'll) figure a way to stop that, too.
I also noticed that most of the spam I got came from Chinese or Korean servers — dunno what the significance of that is. I haven't been tracking spam addresses close enough to know if it's abnormal. |