[nsp-sec] SSH scanners on the rise

[Scott A. McIntyre]

> 
> Hi,
> 
> Attached is the list of scanners from last night (about 835) The number
> has been increasing by about 200 for the last 4 days.

Following on from Joel's data on this -- overnight we had a huge spike
in the number of complaints about ssh brute force scanners against other
networks.  Normally we get maybe one or two complaints per week, but so
far I'd say we're at about 30 unique customers caught being naughty in
the last day.

In my own darknet/honeypot data I had 74 incoming sources on 08 August,
and that jumped to 91 on 09 August.  So far today it's at 57 and it's
only 10am.

Not as bad as Joel, but I don't believe in coincidences.  Someone has
been busy.

Scott A. McIntyre
XS4ALL Internet B.V.