SSH brute forcers

[email protected] Fri, 27 May 2005 21:26:12 -0700
Newsgroups gmane.comp.security.intrusions
Message-ID <OF5AD8FC39.B5399615-ON8825700F.00182B23-8825700F.001833E1@cyber-defense.org>
I've been automatically shunning SSH brute forcers for several months now 
but I've recently decided to become a bit more aggressive.  I am now 
publishing a blacklist populated by known SSH bruteforcing sources on my 
site that is updated every minute based on my own detects from several 
sites.  If you have any addresses to contribute please send them my way. 
Feel free to grab a copy of the list if you want to populate your ACLs 
which is what I'm doing for my customers.

Best regards
-----------------------------------------------------
David Hoelzer
Cyber-Defense.org
http://www.cyber-defense.org/CV.html
_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions