Re: SSH probe attack afoot?

[xyberpix <xyberpix () xyberpix com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

For what it's worth, the latest release of THC's Hydra was released 
recently, maybe that's got something to do with it, are they 
login/password attacks?

xyberpix

On 6 Feb 2005, at 15:09, Bernie Cosell wrote:

> We're now getting hammered with the third round of ssh probes in the 
> last
> four days [one from CA, one from Brazil and one from Virginia].  I was
> wondering: is there some virus or the like floating around now that
> leaves an ssh-hammering zombie in its wake?  Or is it just coincidental
> that we have gotten three floods?
>
> [the probes are just dozens of random-seeming login attempts with a 
> bunch
> of root-password-guesses interspersed]
>
>   /Bernie\
>
> --
> Bernie Cosell                     Fantasy Farm Fibers
> mailto:bernie () fantasyfarm com     Pearisburg, VA
>     -->  Too many people, too few sheep  <--
For Security And Open Source News And Info Visit:
http://www.xyberpix.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFCB840cRMkOnlkwMERAkDmAJ9TKnBlKuZX9vbinl/Hrfi6Uuo5BQCfeKHU
iwNSFCn5/e2yHgJeQ2m9gAU=
=ipSr
-----END PGP SIGNATURE-----