- To: Slug <slug@xxxxxxxxxxx>
- Subject: Re: [SLUG] SSH attack
- From: "Amos Shapira" <amos.shapira@xxxxxxxxx>
- Date: Tue, 31 Jul 2007 19:05:33 +1000
- Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=JPW8SlpnKtZlTdBUPupaT9U1SHOWGbQtku8UUGZP8ZG9Sw3nJrltt9TIMNRbyx8KtZhzKWKeV4iXez+8QNAoit+2N6xqCd/tASJD5+OIEzi04q5/90dBLybEh9YD7nXM89Kf4NK3iW3o6gjJIRWCqoiO2e7YeT12XtTUFLmJLbQ=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=c4Y2b2+JVFdXv8kU6lJVUT2rb0rknJjNwxdvDenAmrGFZB6aNRsLfg1gm71ca7lY57uFEHgHXctPhsuKEKGFaMGE4ThcBDVi1Lkju8TEXS8hy1FyWv15tHPkLedVcobLGLClub2pR7ihc/Hew2rsC5BGpGmAhZt+Vd4juKGGE9o=
On 31/07/07, Alex Samad <alex@xxxxxxxxxxxx> wrote:
>
> Hi
>
> Seems like I am getting attacked from these ip's
> 59.124.57.147
> 61.180.85.226
> 155.230.106.163
> 202.107.245.4
> 202.188.161.66
> 210.164.31.91
> 212.210.63.18
> 219.149.182.145
> 219.94.132.52
>
>
> any one else seeing any new activity ? I currently have rate limiting on
> ssh
> attempts so not to bothered (it also key only)
I just moved my ssh port to a non-standard one to never see or hear of such
attacks ever.
--Amos