[nsp-sec] Some SSH attackers

Michael Sinatra michael at rancid.berkeley.edu
Fri Jun 18 13:30:59 EDT 2010


On 06/18/10 10:15, Torbjorn.Wictorin at cert.sunet.se wrote:
> ----------- nsp-security Confidential --------
>
>
>
>
>
>> Any reason to also post them here, too? I would think getting them to
>> everyone's daily reports makes more sense, but other may have reasons to
>> see individual listings.
>
> yes, normally, but I think this one is a bit different from the usual
> one source to a B-net targets so it would be nice to get some feedback.

This latest attack seems to be very similar to probes we have seen in 
the past year.  It seems that they start up every three months or so.

I am reporting them in the same manner that Kevin is, and I agree that 
is a good way to go.

Also, when posting long lists like this, it's always nice to sort them 
by ASN. :-)

michael



More information about the nsp-security mailing list