[PLUG] No ssh cracking attempts?

Galen Seitz galens at seitzassoc.com
Tue Dec 23 17:27:30 UTC 2014


On 12/23/14 09:14, Rich Shepard wrote:
> On Tue, 23 Dec 2014, Dick Steffens wrote:
>
>> Is there any possibility that all of those cracking attempts came from
>> North Korea? From this morning's USA Today it sounds like "someone" cut
>> North Korea off the Internet.
>
> Dick,
>
>     As I wrote in response to Denis' comment, I thought of that, but when I
> see IP addresses from domains like 123data.cn and similar I wonder if _all_
> the cracking attempts come via PRNK. The news that the country was off-line
> showed up yesterday or the day before.
>
>     So, has anyone else seen cracking attempts via ssh drop to zero over the
> past few days?

I have the opposite experience.  Starting yesterday ssh attempts went up 
significantly.  Originating IPs are from all over the world.

galen
-- 
Galen Seitz
galens at seitzassoc.com



More information about the PLUG mailing list