[Intrusions] SSH brute forcers

DHoelzer at cyber-defense.org DHoelzer at cyber-defense.org
Sat May 28 04:26:12 GMT 2005


I've been automatically shunning SSH brute forcers for several months now 
but I've recently decided to become a bit more aggressive.  I am now 
publishing a blacklist populated by known SSH bruteforcing sources on my 
site that is updated every minute based on my own detects from several 
sites.  If you have any addresses to contribute please send them my way. 
Feel free to grab a copy of the list if you want to populate your ACLs 
which is what I'm doing for my customers.

Best regards
-----------------------------------------------------
David Hoelzer
Cyber-Defense.org
http://www.cyber-defense.org/CV.html


More information about the Intrusions mailing list