Re: Internet SSH scans

[ilaiy <ilaiy.e () gmail com>]

Try denyhosts. Works really well ..

http://denyhosts.sourceforge.net/

./thanks
ilaiy

On 3/3/06, William Tarkington <William.Tarkington () openwave com> wrote:
> This appears to be related to a Romanian organized crime ring.
>
> They are using ssh scans + password lists for easy to guess servers.
> From there they create a phishing site.
>
> It has been on the rise for about 3 months or so from my records.
>
> --Will
>
>
> -----Original Message-----
> From: Tom Frerichs [mailto:tfrerich () shiboleth net]
> Sent: Thursday, March 02, 2006 8:57 PM
> To: incidents () securityfocus com
> Subject: RE: Internet SSH scans
>
> I'm seeing the same sorts of scans, but it seems to be only on hosts
> that
> offer web services and have publicly published URLs that might be found
> in a
> user's cache.
>
> Tom Frerichs - Denver