Jul 24 2004
SSH Brute Force Password attmepts
The Internet Storm Center is warning of brute force password hack attempts against SSH. I’m waiting to see more specific information, but I have been seeing attempts against my own SSH daemon, specifically trying to use the ‘guest’ and ‘test’ accounts. Since neither of those accounts exist on my systems, I feel pretty safe, but I do find it interesting that this has been happening. I hope to find out more soon.
I finally got around to reading the rest of the diary for the 23rd. I’m impressed with the ‘Follow the Bouncing Malware” article. The author built a sacrificial web surfing box and monitored all of the malware that was downloaded while going to several popular sites. I’ve thought about doing the same in the past, but the time involved is more than I have to spare. I’d be interested in seeing the difference between doing this with Internet Explorer and Firefox. Since I switched to Firefox, I haven’t had to run AdAware nearly as often. But as Firefox becomes a better alternative to IE, I expect the scumware authors will start targetting it a lot more.
![[del.icio.us]](http://images.del.icio.us/static/img/delicious.small.gif){kind=small}
One Response to “SSH Brute Force Password attmepts”
Yes I am detecting the same attempts on my sshd through snort?? Strange..