[nsp-sec] Some SSH attackers

robert robert at servalens.com
Fri Jun 18 13:57:22 EDT 2010


ACK AS701, AS19262

Thanks!

Robert

Torbjorn.Wictorin at cert.sunet.se wrote:
> ----------- nsp-security Confidential --------
> 
> 
> 
> ------------------------------------------------------------------------
> 
> hello,
> 
> some of our customers are the subject of intense ssh probing, more
> distributed than usual. Time in UTC and sessions 'established'.
> 
> Torbjörn Wictorin,
> SUNet CERT
> 

701     | 149.89.1.27      | US |  2010-06-17.13:46:16 | UUNET - MCI
Communications Services, Inc. d/b/a Verizon Business
701     | 208.252.47.131   | US |  2010-06-17.14:41:14 | UUNET - MCI
Communications Services, Inc. d/b/a Verizon Business
701     | 65.242.165.99    | US |  2010-06-17.14:41:15 | UUNET - MCI
Communications Services, Inc. d/b/a Verizon Business
19262   | 71.185.194.5     | US |  2010-06-18.02:16:14 | VZGNI-TRANSIT -
Verizon Internet Services Inc.
19262   | 71.98.243.186    | US |  2010-06-17.10:25:29 | VZGNI-TRANSIT -
Verizon Internet Services Inc.
19262   | 74.108.1.105     | US |  2010-06-17.13:07:14 | VZGNI-TRANSIT -
Verizon Internet Services Inc.



More information about the nsp-security mailing list