scy on Nostr: Interesting type of attack: People sending out TCP packets with a spoofed source ...
Interesting type of attack: People sending out TCP packets with a spoofed source address, targeting port 22 on random (or not) IP addresses on the net.
Not to probe whether there's SSH on that server, but to generate abuse reports against the spoofed IP, in order to force it off the net.
https://delroth.net/posts/spoofed-mass-scan-abuse/
Keep this in mind when you receive abuse reports. _Especially_ if you're an ISP.
#infosec #networking #sysadmin
Not to probe whether there's SSH on that server, but to generate abuse reports against the spoofed IP, in order to force it off the net.
https://delroth.net/posts/spoofed-mass-scan-abuse/
Keep this in mind when you receive abuse reports. _Especially_ if you're an ISP.
#infosec #networking #sysadmin