Comments on: Distributed SSH Brute Force Attacks http://ddos.arbornetworks.com/2008/12/distributed-ssh-brute-force-attacks/ A weblog dedicated to educating the community on security threats that matter Sun, 29 Jan 2012 02:23:23 +0000 hourly 1 http://wordpress.org/?v= By: Mitigating SSH Brute Force Attacks | InfoSecStuff http://ddos.arbornetworks.com/2008/12/distributed-ssh-brute-force-attacks/comment-page-1/#comment-262530 Mitigating SSH Brute Force Attacks | InfoSecStuff Fri, 27 Aug 2010 01:44:06 +0000 http://asert.arbornetworks.com/?p=551#comment-262530 [...] or write a script to block them automatically based on log entries. There are also a number of blacklists available on the Internet that provide a good starting point of hosts/networks to block even if they [...] [...] or write a script to block them automatically based on log entries. There are also a number of blacklists available on the Internet that provide a good starting point of hosts/networks to block even if they [...]

]]> By: Håkon Alstadheim http://ddos.arbornetworks.com/2008/12/distributed-ssh-brute-force-attacks/comment-page-1/#comment-207891 Håkon Alstadheim Sun, 03 May 2009 11:15:23 +0000 http://asert.arbornetworks.com/?p=551#comment-207891 Hi, I used to have one of the entries in your blacklist-list at my website (http://www.alstadheim.priv.no/cgi-bin/svarteliste). That link should be removed from the list. It has been discontinued. There is no point in running such a thing in isolation any more, since most serious attacs nowadays are distributed slow attacks. To stop those we'd need a distributed approach, like taking port 22 hits from dshield.org. I don't have much time for IT-security work anymore, so the idea is hereby put into the public domain. Hi, I used to have one of the entries in your blacklist-list at my website
(http://www.alstadheim.priv.no/cgi-bin/svarteliste). That link should be removed from the list.

It has been discontinued. There is no point in running such a thing in isolation any more, since most serious attacs nowadays are distributed slow attacks. To stop those we’d need a distributed approach, like taking port 22 hits from dshield.org.

I don’t have much time for IT-security work anymore, so the idea is hereby put into the public domain.

]]> By: Nerd Gene » Blog Archive » Prevent port scans and SSH brute force http://ddos.arbornetworks.com/2008/12/distributed-ssh-brute-force-attacks/comment-page-1/#comment-186300 Nerd Gene » Blog Archive » Prevent port scans and SSH brute force Fri, 19 Dec 2008 19:11:12 +0000 http://asert.arbornetworks.com/?p=551#comment-186300 [...] the influx of reports about botnets doing SSH brute force attacks, I decided to check my own server logs. Sure enough, I [...] [...] the influx of reports about botnets doing SSH brute force attacks, I decided to check my own server logs. Sure enough, I [...]

]]> By: Chinese Sandwich Babies Take Over Duh Interwebs | We Break Things http://ddos.arbornetworks.com/2008/12/distributed-ssh-brute-force-attacks/comment-page-1/#comment-186281 Chinese Sandwich Babies Take Over Duh Interwebs | We Break Things Fri, 19 Dec 2008 15:31:00 +0000 http://asert.arbornetworks.com/?p=551#comment-186281 [...] [3] http://edwardlucas.blogspot.com/2008/12/cyberwarfare.html [4] http://asert.arbornetworks.com/2008/12/distributed-ssh-brute-force-attacks/ Share and Enjoy: These icons link to social bookmarking sites where readers can share and [...] [...] [3] http://edwardlucas.blogspot.com/2008/12/cyberwarfare.html [4] http://asert.arbornetworks.com/2008/12/distributed-ssh-brute-force-attacks/ Share and Enjoy: These icons link to social bookmarking sites where readers can share and [...]

]]> By: The Linux Mint Blog » Blog Archive » The Mint Newsletter - issue 69 http://ddos.arbornetworks.com/2008/12/distributed-ssh-brute-force-attacks/comment-page-1/#comment-185477 The Linux Mint Blog » Blog Archive » The Mint Newsletter - issue 69 Mon, 15 Dec 2008 21:37:10 +0000 http://asert.arbornetworks.com/?p=551#comment-185477 [...] SSH Brute Force Attacks confounds [...] [...] SSH Brute Force Attacks confounds [...]

]]>