Security Incidents mailing list archives

Re: SSH probe attack afoot?

From: Joe Egloff <joe.egloff () franke com>
Date: 8 Feb 2005 04:45:49 -0000

In-Reply-To: <1107809193.5021.17.camel@localhost.localdomain>

On Sun, 2005-02-06 at 10:09 -0500, Bernie Cosell wrote:

We're now getting hammered with the third round of ssh >> probes in the last=


Same here on various systems (including mine at home), however previously to the SSH brute force, we experienced  also 
brute force password attacks on our FTP service.

When I tracked some of the IP addresses, I found some universities in taiwan and other asian countries.

- Joe

Current thread:

Re: SSH probe attack afoot?, (continued)
- - Re: SSH probe attack afoot? Steve Bonds (Feb 07)
  - Re: SSH probe attack afoot? Steven Harrison (Feb 07)
- Re: SSH probe attack afoot? xyberpix (Feb 07)
  - Re: SSH probe attack afoot? Stephen Warren (Feb 08)
    - Re: SSH probe attack afoot? j () 65535 com (Feb 08)
- Re: SSH probe attack afoot? Barrie Dempster (Feb 07)
- Re: SSH probe attack afoot? j lake (Feb 08)
- Re: SSH probe attack afoot? Jeffrey Goldberg (Feb 12)
  - Re: SSH probe attack afoot? Stephen J. Smoogen (Feb 12)
  - Re: SSH probe attack afoot? Jeffrey Goldberg (Feb 16)
- Re: SSH probe attack afoot? Joe Egloff (Feb 07)
  - Re: SSH probe attack afoot? naverxp (Feb 08)
    - Re: SSH probe attack afoot? Tim (Feb 08)
  - Re: SSH probe attack afoot? Frank Knobbe (Feb 08)
    - Re: SSH probe attack afoot? Matt Fisher (Feb 09)
- Re: SSH probe attack afoot? Joe Egloff (Feb 08)
  - Re: SSH probe attack afoot? Barrie Dempster (Feb 08)
    - Re: SSH probe attack afoot? j () 65535 com (Feb 09)
    - Chinese HTTP ACKs David Gillett (Feb 09)
    - Re: Chinese HTTP ACKs Frank Knobbe (Feb 09)