Security Incidents mailing list archives

Re: SSH probe attack afoot?

From: Frank Knobbe <frank () knobbe us>
Date: Tue, 08 Feb 2005 13:04:21 -0600

On Tue, 2005-02-08 at 04:45 +0000, Joe Egloff wrote:

When I tracked some of the IP addresses, I found some universities in
taiwan and other asian countries.


After you tracked those IP's, have you checked if these IP's are open
proxies? I have seen a lot of these type attacks get funneled through
open socks proxies.

Regards,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part

Current thread:

Re: SSH probe attack afoot?, (continued)
- - Re: SSH probe attack afoot? Stephen Warren (Feb 08)
    - Re: SSH probe attack afoot? j () 65535 com (Feb 08)
- Re: SSH probe attack afoot? Barrie Dempster (Feb 07)
- Re: SSH probe attack afoot? j lake (Feb 08)
- Re: SSH probe attack afoot? Jeffrey Goldberg (Feb 12)
  - Re: SSH probe attack afoot? Stephen J. Smoogen (Feb 12)
  - Re: SSH probe attack afoot? Jeffrey Goldberg (Feb 16)
- Re: SSH probe attack afoot? Joe Egloff (Feb 07)
  - Re: SSH probe attack afoot? naverxp (Feb 08)
    - Re: SSH probe attack afoot? Tim (Feb 08)
  - Re: SSH probe attack afoot? Frank Knobbe (Feb 08)
    - Re: SSH probe attack afoot? Matt Fisher (Feb 09)
- Re: SSH probe attack afoot? Joe Egloff (Feb 08)
  - Re: SSH probe attack afoot? Barrie Dempster (Feb 08)
    - Re: SSH probe attack afoot? j () 65535 com (Feb 09)
    - Chinese HTTP ACKs David Gillett (Feb 09)
    - Re: Chinese HTTP ACKs Frank Knobbe (Feb 09)