[Dshield] SSH Scans & Premade Kits

David Cary Hart DShield at TQMcube.com
Sat Mar 19 19:12:54 GMT 2005


On Fri, 2005-03-18 at 22:50 -0500, jayjwa wrote:
> So, this is how those little SOB's have been finding SSH's to scan. Anyone 
> wonder why these scans have gone thru the roof lately? 

If one MUST have 22 open then I recommend using something like swatch to
send an attacker to IPTables (preferably -j TARPIT) on the first
attempt.
-- 
________________________________________________________________________
Kill Spam at the Source: http://www.TQMcube.com/spam_trap.htm
Today's Spam Trap Adds:  http://www.TQMcube.com/BlockedToday
RBLDNSD HowTo:           http://www.TQMcube.com/rbldnsd.htm



More information about the list mailing list