Re: Uptick in SSH scanning?
| Newsgroups | gmane.org.operators.internet-access |
|---|---|
| Message-ID | <[email protected]> |
On Wed, 3 Sep 2008, Chris Adams wrote: > Has anyone else seen a significant rise in SSH scanning in the last day > or two? Rather than my usual short list of blocked hosts (usually under > 10), I've got several hundred blocked right now, and virtually all for > SSH login attempts with invalid users. I saw a huge spike yesterday on one host, but I just thought that was an anomoly. While we're on the topic, coes anyone know of a good BruteBlocker type program that uses null routing instead of firewalling (similar to what portsentry can be configured to do)? James Smallacombe PlantageNet, Inc. CEO and Janitor [email protected] http://3.am ========================================================================= -- Eat sushi frequently. - Avi [email protected] is the human contact address. [email protected] is the list posting address. See below URL for subscribe/unsubscribe and list options: http://inet-access.net/mailman/listinfo/list