[PLUG] No ssh cracking attempts?

[Jim Garrison]

On 12/23/2014 9:14 AM, Rich Shepard wrote:
> On Tue, 23 Dec 2014, Dick Steffens wrote:
> 
>> Is there any possibility that all of those cracking attempts came from
>> North Korea? From this morning's USA Today it sounds like "someone" cut
>> North Korea off the Internet.
> 
> Dick,
> 
>    As I wrote in response to Denis' comment, I thought of that, but when I
> see IP addresses from domains like 123data.cn and similar I wonder if _all_
> the cracking attempts come via PRNK. The news that the country was off-line
> showed up yesterday or the day before.
> 
>    So, has anyone else seen cracking attempts via ssh drop to zero over the
> past few days?

I never get ANY ssh cracking attempts by the simple expedient of
running SSH on a non-standard port.  I used to get hundreds of
attempts a day but reconfigured SSH to listen on a specific port above
20000 and now never see any attempts.

-- 
Jim Garrison (jhg at acm.org)
PGP Keys at http://www.jhmg.net RSA 0x04B73B7F DH 0x70738D88