Lexa Software: Security-Alerts@yandex-team.ru archive

date               records    targets      sources tcpratio
2007-10-01    606506      151949    875    100
2007-10-02    1317888    88940        882    100
2007-10-03    828467      112525    881    100
2007-10-04    1344606    53047        843    100
2007-10-05    541713     107031    873    100
2007-10-06    346431    92291        797    100
2007-10-07    282205    47498        848    100
2007-10-08    756005    130631    887    100
2007-10-09    915582    53250        868    100
2007-10-10    321079    85194        860    100
2007-10-11    608362    125370    837    100
2007-10-12    225450    87848        772    100
2007-10-13    147506    60599        829    100
2007-10-14    380275    148700    909    100
2007-10-15    749183    319528    930    100
2007-10-16    1558853    1027756    896    100
2007-10-17    1879869    1564587    901    100
2007-10-18    195446    56762        929    100
2007-10-19    139687    50711        932    100
2007-10-20    249887    96917        933    100
2007-10-21    542479    104323    1012    100
2007-10-22    561213    101314    810    100

I searched for a blacklist that was specific to ssh bruteforce attempts and=
 found this one: http://danger.rulez.sk/projects/bruteforceblocker/blist.ph=
p

I am not recommending this black list as I just learned about it and for mo=
st of us it would probably be easier to just allow ssh access from the CIDR=
 blocks we expect.