[Dshield] SSH threats

Alan Clegg alan at clegg.com
Tue Oct 2 11:37:15 GMT 2007

Tomas L. Byrnes wrote:
> How do you handle the "scorched earth" problem? Many attacking IPs are
> dynamic.

99.999% of the world (and much closer to 100% of dynamic IP space) has
no need to ssh (or otherwise access) the machines that the bad apples
are being blocked from.

Dealing with that 0.001% (or less) of hosts won't make me lose any sleep.

In the beginning of a change, the patriot is a scarce man, brave,
hated, and scorned.  When his cause succeeds however, the timid
join him, for then it cost nothing to be a patriot.

More information about the list mailing list