ssh 'attack'

[Net Llama!]

On Fri, 27 Aug 2004, Bill Campbell wrote:
> On Fri, Aug 27, 2004, Net Llama! wrote:
> >Yup.  And the origin IP addres changes every day.  Last night it was
> >165.229.192.33 which is in korea.
>
> This has been going on for years.  We reject thousands of these every month
> using tcp_wrappers.

Perhaps on your neck of the internet, but not everywhere.  I think its
gotten significantly worse in the past few months.  I used to see maybe
one attempt/box a month.  Now its 8-12/box per day.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Lonni J Friedman                                netllama at linux-sxs.org
Linux Step-by-step & TyGeMo                  http://netllama.ipfox.com