Security Incidents mailing list archives

Re: Internet SSH scans


From: Jonathan Nichols <jnichols () pbp net>
Date: Fri, 03 Mar 2006 09:44:45 -0800

terry white wrote:
on "3-2-2006" "Tom Frerichs" writ:

: but it seems to be only on hosts that offer web services

    the scans i'm seeing are not that specific ...


They're not that specific. I see them against my cable modem all the time.

DenyHosts is a python script that will drop offending IPs into hosts.deny.

denyhosts.sourceforge.net

It's a decent way to deal with the issue. Simply changing the port can cause a whole world of user support issues.


Current thread: