[nsp-sec] Increase in ssh brute force ? (especially from ASN 9829, 31452, 35154)

[宫一鸣]

To us, it looks like business as usual, as can be seen from the attached
pic, which shows network wide port 22 flows.

We do have a real peak at 13:00 on the 12th, which hits 5 million flows,
but today¹s flow looks normal(relatively speaking) to us.

Regards

Yiming 

Director of Network Security Research lab at Qihoo 360

www.360.cn





On 4/16/15, 4:03 AM, "Mike Tancsa" <mike at sentex.net> wrote:

>----------- nsp-security Confidential --------
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screen Shot 2015-04-16 at 9.45.45 AM.png
Type: image/png
Size: 27998 bytes
Desc: Screen Shot 2015-04-16 at 9.45.45 AM.png
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20150416/3f16fa3a/attachment.png>