[nsp-sec] ACK AS852 - RE: distributed ssh scanners again

Wed Nov 3 10:33:11 EDT 2010

> Starting at around 19:15 GMT -400, about 250 different hosts started
> to bruteforce ssh scan through my AS trying just the root account via
> ssh. They would hit a dozen or so different web servers in my network
> once per IP so as not to set off individual alarms on each host.
> Sorry, the times are all GMT -400 (New York time).

ACK for AS852.
Thanks for the heads-up, Mike.
Chris