Re: Uptick in SSH scanning?
Rob Thomas <[email protected]>
| Newsgroups | gmane.org.operators.internet-access |
|---|---|
| Message-ID | <[email protected]> |
Hey, Chris. > Has anyone else seen a significant rise in SSH scanning in the last day > or two? Rather than my usual short list of blocked hosts (usually under > 10), I've got several hundred blocked right now, and virtually all for > SSH login attempts with invalid users. The SSH scan numbers in our Darknets show some increase for some of the past few days, but overall no great global increase. 2008-08-29 21171 2008-08-30 15465 2008-08-31 24977 2008-09-01 17517 2008-09-02 19534 2008-09-03 22809 2008-09-04 86 (so far) For a monthly comparison: 2008-06 674101 2008-07 638838 2008-08 642195 2008-09 59946 (so far) Thanks, Rob. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, "Out of coffee!"); -- Eat sushi frequently. - Avi [email protected] is the human contact address. [email protected] is the list posting address. See below URL for subscribe/unsubscribe and list options: http://inet-access.net/mailman/listinfo/list