Re: Internet SSH scans
Jonathan Nichols <[email protected]>
| Newsgroups | gmane.comp.security.incidents |
|---|---|
| Organization | pbp.net |
| Message-ID | <[email protected]> |
terry white wrote: > on "3-2-2006" "Tom Frerichs" writ: > > : but it seems to be only on hosts that offer web services > > the scans i'm seeing are not that specific ... > They're not that specific. I see them against my cable modem all the time. DenyHosts is a python script that will drop offending IPs into hosts.deny. denyhosts.sourceforge.net It's a decent way to deal with the issue. Simply changing the port can cause a whole world of user support issues.