Re: Uptick in SSH scanning ?

["Joel L. Rosenblatt" <joel () COLUMBIA EDU>]

Hi,

We saw

Type            probes        unique IPs
22/tcp         15377395    190

in the last 24 hours - A little higher than normal

Thanks,
Joel Rosenblatt


Joel Rosenblatt, Director Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel
Public PGP key
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x90BD740BCC7326C3


On Fri, Dec 12, 2014 at 8:44 AM, Andrew Daviel <advax () triumf ca> wrote:
> We seem to have seen a 10x increase in SSH scans over the last few days.
> I wondered if that was a common experience.
> From something like 40 unique source addresses/day to a /16 subnet to over
> 1000 yesterday.
>
>
> --
> Andrew Daviel, TRIUMF, Canada
> Tel. +1 (604) 222-7376  (Pacific Time)
> Network Security Manager