Re: [tlug] ssh scans

[Matt Doughty <mdoughty@example.com>]

On Thu, Jul 04, 2002 at 03:19:11PM +0900, Stephen J. Turnbull wrote:
> >>>>> "Matt" == Matt Doughty <mdoughty@example.com> writes:
> 
>     Matt> Anyone else seeing these now?
> 
> No.  :-)  I've been seeing them for many months, usually 2--3 times a
> day, mostly from wanadoo.fr (Hi, Godwin!) and t-online.de.  The FTP
> probes come from all over the place, though.
> 

I have been getting the ftp scans on a daily basis myself for quite
a long while.

> I've actually only seen one ssh probe since the exploit got posted.

Hmm, I haven't had any ssh scans at all until the last couple of
days really.  I got 4 hits just today.


--Matt