Security Incidents mailing list archives
Re: remote openssh probe or crack?.
From: Rich Henning <vulnerable () fast net>
Date: Fri, 14 Jun 2002 11:45:28 -0400
On Thu, Jun 13, 2002 at 04:23:34PM -0500, m () rl206 org wrote:
Speaking of which, has else anyone noticed an upturn in ssh scanning lately?
If "lately" refers to about the last year and a half, definitely. It used to be that my wrapper scripts would throw an ssh attempt only a few times a week. Over the last year or so, I see many of these a day. This behavior can probably be attributed to kiddies using automated scanning tools over a wide range of blocks to find vulnerable machines to compromise, due to the rash of openssh issues that have manifested during this time, but that's only my guess. -- [ rich henning ] /"\ [ henninrp () fast net ] \ / X support the ascii ribbon campaign against html e-mail / \ ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Odd traffic on port 7002 need help figuring it out., (continued)
- Odd traffic on port 7002 need help figuring it out. steveg (Jun 13)
- Re: Odd traffic on port 7002 need help figuring it out. nito (Jun 13)
- Re: Odd traffic on port 7002 need help figuring it out. steveg (Jun 13)
- Re: Odd traffic on port 7002 need help figuring it out. nito (Jun 13)
- Re: remote openssh probe or crack?. Justin Coffey (Jun 13)
- Re: remote openssh probe or crack?. Oblek (Jun 13)
- Re: remote openssh probe or crack?. Skip Carter (Jun 13)
- Re: remote openssh probe or crack?. Nate Campi (Jun 13)
- Re: remote openssh probe or crack?. woof (Jun 13)
- Re: remote openssh probe or crack?. Christian Vogel (Jun 13)
- Re: remote openssh probe or crack?. m () rl206 org (Jun 13)
- Re: remote openssh probe or crack?. Rich Henning (Jun 14)
- Re: remote openssh probe or crack?. gabriel rosenkoetter (Jun 14)
- Odd traffic on port 7002 need help figuring it out. steveg (Jun 13)