[Dshield] ssh attacks

Jeff Kell jeff-kell at utc.edu
Tue Oct 12 17:09:34 GMT 2004


JD Durick wrote:

> According to our IDS/FW logs, we have been seeing similar activity on 
> our DMZ.  Most of the traffic seems to be coming from far eastern 
> owned ip addresses.

We're getting probed on 21, 22, 23, and 25 and a few assorted others.  
All source netblocks I chased back were southeast asian.

Jeff



More information about the list mailing list