[Dshield] ssh attacks

Darin Fisher pfm.net at gmail.com
Tue Oct 12 16:16:13 GMT 2004

Yes, I've been seeing a tremendous increase in attempts also.
A average of 0 - 10 per day is now averaging over 200 per day.

I didn't check your addresses but attempts on my sites all seem to be
coming from Asia; China and Korea.

I guess the hacker school
must be labs.

Any other thoughts?


On Tue, 12 Oct 2004 08:30:08 -0700, Barton L. Phillips
<admin at bartonphillips.com> wrote:
> In the last several days I have seen an increase in attempts to log into
> my server via SSH. Previously I was only seeing the "test" and "guest"
> attempts previously mentioned on this list. Here is an example of what I
> saw yesterday:
> Failed logins from these:
> ...
> Has anyone else been seeing this?
> --
> ----------------
> Barton L. Phillips
> Applied Technology Resources, Inc.
> Tel: (818)652-9850
> Web: http://www.applitec.com 
> _______________________________________________
> DShield and the Internet Storm Center are sponsored by the SANS Institute.
> To learn more about current SANS training, see http://www.sans.org .
> _______________________________________________
> send all posts to list at lists.dshield.org 
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list 

"Those who would give up essential liberty to purchase a little
temporary safety deserve neither liberty or safety."
 - Benjamin Franklin

More information about the list mailing list