Re: Internet SSH scans
ilaiy <[email protected]>
| Newsgroups | gmane.comp.security.incidents |
|---|---|
| Message-ID | <[email protected]> |
Try denyhosts. Works really well .. http://denyhosts.sourceforge.net/ ./thanks ilaiy On 3/3/06, William Tarkington <[email protected]> wrote: > This appears to be related to a Romanian organized crime ring. > > They are using ssh scans + password lists for easy to guess servers. > From there they create a phishing site. > > It has been on the rise for about 3 months or so from my records. > > --Will > > > -----Original Message----- > From: Tom Frerichs [mailto:[email protected]] > Sent: Thursday, March 02, 2006 8:57 PM > To: [email protected] > Subject: RE: Internet SSH scans > > I'm seeing the same sorts of scans, but it seems to be only on hosts > that > offer web services and have publicly published URLs that might be found > in a > user's cache. > > Tom Frerichs - Denver > >