funsec mailing list archives

Oracle UK Systems Accused in 'SSH Hacking Spree'


From: "Paul Ferguson" <fergdawg () netzero net>
Date: Fri, 13 Jul 2007 17:56:12 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Via The Register.

[snip]

Compromised computers at Oracle UK are listed among the 10 worst offenders
on the net for launching attacks on servers which run SSH (secure shell)
server software.

Oracle said it is investigating the reported problem, which it is yet to
either confirm or refute.

A box (or group of boxes behind a proxy) at Oracle UK is among the worst
offenders for launching attacks, according to statistics from servers
running DenyHosts software to block SSH brute-force password attacks.

DenyHosts is a script for Linux system administrators designed to help
thwart SSH server attacks. Around 6,800 users contribute to the data it
collects.

[snip]

More:
http://www.theregister.co.uk/2007/07/13/oracle_ssh_shamelist_listing/

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)

wj8DBQFGl7y5q1pz9mNUZTMRAv/7AKD1yXskTIiSfWhLiogqhZKP/caKjQCdG2sf
p7eVrALM75ovvvpe+lOu1yY=
=t6p/
-----END PGP SIGNATURE-----




--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: