<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"><html><head><meta name="qrichtext" content="1" /><style type="text/css">p, li { white-space: pre-wrap; }</style></head><body style=" font-family:'Sans Serif'; font-size:10pt; font-weight:400; font-style:normal;">> Thanks for the information. I run denyhosts, and receive ridiculous<br>
> numbers of these connections to my servers as well. I ran a quick<br>
> script to grab what denyhosts had blocked, and determined how many of<br>
> those connections were from Tor exit nodes. Quite a large number!<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Off topic, I had a whole lot of login attempts at my servers. I changed the <br>
SSH port to a non-standard port and I have not seen a single login attempt <br>
since then. <br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Attackers targeting me could easily portscan, but those who simply scan <br>
numerous IPs for someting at 22 fail.<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p></body></html>