[nsp-sec] Slow distributed SSH scan, list of IPs

Fri Oct 30 09:45:14 EDT 2009

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kurt Jaeger wrote:
> Those hosts (and probably many more) are tacking part in a slow
> distributed SSH scan.

Sanitized notifications have been sent to the following:

> 81      | 198.85.237.251   | NCREN - MCNC
> 2698    | 205.237.127.180  | IASTATE-AS - Iowa State University
> 2900    | 149.169.227.81   | WN-AZ-AS - Arizona Tri University Network
> 3701    | 140.211.11.40    | SAFARICOM Safaricom
> 36375   | 141.212.108.169  | UMICH-AS-5 - University of Michigan

Thank you!

Gabe

- --
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkrq7eoACgkQwqygxIz+pTtEPwCfVPe2M3tE2W8FLAsy2JGCnNl3
KP4AoLBuQzz1dAWV3awZ/TLKY8EqhCsy
=yshs
-----END PGP SIGNATURE-----