Security Incidents mailing list archives

SSH probe attack afoot?


From: "Bernie Cosell" <bernie () fantasyfarm com>
Date: Sun, 06 Feb 2005 10:09:42 -0500

We're now getting hammered with the third round of ssh probes in the last 
four days [one from CA, one from Brazil and one from Virginia].  I was 
wondering: is there some virus or the like floating around now that 
leaves an ssh-hammering zombie in its wake?  Or is it just coincidental 
that we have gotten three floods?

[the probes are just dozens of random-seeming login attempts with a bunch 
of root-password-guesses interspersed]

  /Bernie\

-- 
Bernie Cosell                     Fantasy Farm Fibers
mailto:bernie () fantasyfarm com     Pearisburg, VA
    -->  Too many people, too few sheep  <--       




Current thread: