SSH hank attempts… bad?

[Wade Preston Shearer]

My server can get up ~12,000 [1] failed log in attempts recorded in  
my server's logs in one day. How much of a concern should this be? I  
am aware of restricting shell access to certain IPs. Will that  
restrict the handshake or will I still see the attempts in my logs?  
Are there any ways to restrict the attempts?


[1] Generally, ~3-20 on against standard system accounts (root, news,  
squid, apache, etc), ~5,000 against unknown, and ~12,000 against  
"unmated entries."


Wade Preston Shearer


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2425 bytes
Desc: not available
Url : http://plug.org/pipermail/plug/attachments/20060411/9d2c2756/attachment.bin