Subj : Unwanted connections to port 23.
To : mark lewis
From : j b l
Date : Mon Jun 12 2017 06:24 am
Re: Unwanted connections to port 23.
By: mark lewis to Ignatius on Mon Jun 12 2017 04:35 am
ML> intrusion detection systems are the only things i've seen that come close
ML> but the connection and attempted login still has to take place... the
ML> *ONLY* other option is to get off of port 23 and the other few that MIRAI
ML> specifically targets... that includes the default SSH port as well...
I've just come across a utility, called "PSAD", it is a port scanning utility..
if the "danger level" meets a certain threshold, it will automatically block
the offending IP address. Pretty cool. I'm still testing it out at the moment,
but this may be what i've been looking for.
