Menu
▾
▴
Re: [SSHGuard-users] Portscanners
|
From: Kevin Z. <kev...@gm...> - 2018-10-13 18:38:21
|
Not a stupid question; I (or someone else) just needs to sit down and write the rules for this new attack signature. On 10/13/18 11:20 AM, Jos Chrispijn wrote: > Was this a stupid question or is there a way to solve this? > > On 7-10-2018 16:41, Jos Chrispijn wrote: >> >> Would it be possible to put this behaviour as being abusive and put on >> the blacklist as well? >> >> Oct 7 16:32:39 myserver postfix/postscreen[54284]: CONNECT from >> [221.225.107.228]:56134 to [x.x.x.x]:25 >> Oct 7 16:32:40 myserver postfix/postscreen[54284]: DISCONNECT >> [221.225.107.228]:56134 >> Oct 7 16:32:41 myserver postfix/postscreen[54284]: CONNECT from >> [221.225.107.228]:56149 to [x.x.x.x]:25 >> Oct 7 16:32:42 myserver postfix/postscreen[54284]: DISCONNECT >> [221.225.107.228]:56149 >> Oct 7 16:32:42 myserver postfix/postscreen[54284]: CONNECT from >> [221.225.107.228]:56168 to [1x.x.x.x]:25 >> Oct 7 16:32:44 myserver postfix/postscreen[54284]: DISCONNECT >> [221.225.107.228]:56168 >> >> thanks, Jos >> > > > _______________________________________________ > sshguard-users mailing list > ssh...@li... > https://lists.sourceforge.net/lists/listinfo/sshguard-users > -- Kevin Zheng kev...@gm... | ke...@be... | PGP: 0xC22E1090 |
