<HTML>
<HEAD>
<TITLE>Spike in SSH scans</TITLE>
</HEAD>
<BODY>
<FONT FACE="Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'>Anyone else seeing these? Started about 3 hours ago..here’s a snipit:<BR>
<BR>
21:19:09 192.168.0.3 snort[577]: [1:2006435:3] BLEEDING-EDGE SCAN LibSSH Based SSH Connection - Often used as a BruteForce Tool [Classification: Misc activity] [Priority: 3]: {TCP} 203.173.40.167:21823 -> 192.168.0.2:22<BR>
<BR>
And a current list of hits in the last 3 hours:<BR>
<BR>
124.39.168.43<BR>
129.13.250.46<BR>
145.253.128.85<BR>
148.245.157.217<BR>
149.99.20.238<BR>
161.106.180.173<BR>
193.158.0.195<BR>
194.25.114.106<BR>
195.113.185.38<BR>
195.138.155.54<BR>
195.228.238.186<BR>
195.56.72.157<BR>
195.73.54.73<BR>
200.126.111.38<BR>
200.62.177.91<BR>
200.79.37.194<BR>
201.16.17.246<BR>
201.216.245.25<BR>
201.245.109.170<BR>
211.139.69.28<BR>
212.101.30.8<BR>
212.202.248.130<BR>
212.248.23.6<BR>
213.136.105.130<BR>
213.156.69.126<BR>
213.186.47.65<BR>
213.255.77.62<BR>
213.35.211.206<BR>
213.66.184.110<BR>
213.84.74.76<BR>
216.193.233.168<BR>
217.110.171.150<BR>
217.113.71.130<BR>
217.151.68.244<BR>
217.156.103.234<BR>
217.160.19.157<BR>
217.71.214.191<BR>
218.207.69.8<BR>
218.249.108.166<BR>
60.12.130.117<BR>
62.105.180.178<BR>
62.112.158.141<BR>
62.218.215.134<BR>
62.65.142.213<BR>
62.76.246.253<BR>
64.81.228.200<BR>
66.236.209.227<BR>
67.118.242.129<BR>
67.132.173.150<BR>
70.107.224.252<BR>
70.151.62.113<BR>
72.248.139.227<BR>
77.104.241.141<BR>
80.200.249.230<BR>
80.201.241.44<BR>
80.33.222.48<BR>
80.51.139.82<BR>
80.55.142.66<BR>
81.180.88.6<BR>
81.68.198.23<BR>
81.75.124.51<BR>
82.103.102.12<BR>
82.141.44.153<BR>
82.239.231.89<BR>
83.15.246.226<BR>
83.151.18.189<BR>
83.19.34.46<BR>
83.227.183.88<BR>
83.236.170.54<BR>
83.246.96.38<BR>
83.246.96.54<BR>
83.65.141.94<BR>
85.114.130.199<BR>
85.120.129.130<BR>
85.17.10.106<BR>
85.214.54.182<BR>
85.48.224.186<BR>
87.127.193.225<BR>
88.32.56.1<BR>
89.110.147.183<BR>
89.171.12.78<BR>
91.192.189.19<BR>
<BR>
James</SPAN></FONT>
</BODY>
</HTML>