Re: SSH brute forcers
Jim McCullough <[email protected]> Sat, 28 May 2005 13:31:32 -0400
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
WOOOHOOO. Its getting to the point that the SSH brute force attmepts on the 2 servers I am working on atm are coming at 4 to 8 times a day, no reasoning behind the number of attempts yet either. Jim McCullough On 5/28/05, [email protected] <[email protected]> wrote: > I've been automatically shunning SSH brute forcers for several months now > but I've recently decided to become a bit more aggressive. I am now > publishing a blacklist populated by known SSH bruteforcing sources on my > site that is updated every minute based on my own detects from several > sites. If you have any addresses to contribute please send them my way. > Feel free to grab a copy of the list if you want to populate your ACLs > which is what I'm doing for my customers. > > Best regards > ----------------------------------------------------- > David Hoelzer > Cyber-Defense.org > http://www.cyber-defense.org/CV.html > _______________________________________________ > Intrusions mailing list > [email protected] > http://www.dshield.org/mailman/listinfo/intrusions > -- Jim McCullough _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions