[PLUG] Brute force SSH attack confounds defenders

["Brian Vagnoni" <bvagnoni@v-system.net>]

There goes the neighborhood :-)

ATTACKS
 --SSH Brute Force Attack Uses Botnet to Target Specific Servers
(December 5 & 8, 2008)
After noting a spike in failed SSH logins in October, researchers
identified an ongoing brute-force attack that involves multiple machines
that have been compromised with bot software.  The attacks target
specific servers.  Researchers have not been able to obtain a sample of
the botnet code used in the attack.
http://www.theregister.co.uk/2008/12/08/brute_force_ssh_attack/
http://www.heise-online.co.uk/security/Distributed-SSH-attacks-bypass-blacklists--/news/112174



--------------------------------------------------
Brian Vagnoni
PGP Digital Fingerprint
F076 6EEE 06E5 BEEF EBBD  BD36 F29E 850D FC32 3955
--------------------------------------------------
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug