[Intrusions] SSH brute force attacks

[Smith, Donald]

While some "attacks" have been seen coming from other countries asia
does seem to be the largest contributor by FAR (east:).



Donald.Smith at qwest.com giac 
-----Original Message-----
From: intrusions-bounces at lists.sans.org
[mailto:intrusions-bounces at lists.sans.org] On Behalf Of Luc Pauwels
Sent: Saturday, August 27, 2005 3:36 AM
To: intrusions at lists.sans.org
Subject: [Intrusions] SSH brute force attacks


Just wondering...

I've noticed that the majority of SSH brute force attacks on our systems
seem to
originate from Asia (India, China, Korea).  Is this just a coincidence,
or is
there more going on?

Rgrds,
Luc
_______________________________________________
Intrusions mailing list
Intrusions at lists.sans.org
http://www.dshield.org/mailman/listinfo/intrusions