SSH Brute Force on Non-Standard Ports

SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

SSH Brute Force on Non-Standard Ports
One of the Handlers here at the ISC reports seeing an increase in SSH attacks on non-standard ports. The traffic that is being seen is a brute force SSH attempt, and is more than just a connect, it is providing credentials in attempt to gain access. If anybody is seeing similar SSH attempts on non-standard ports, we'd love to take a look at any logs or packet captures related to this activity. These logs and packets can be reached at the "Contact Us" page. tony d0t carothers --gmail	Tony 150 Posts ISC Handler Dec 16th 2012
Thread locked Subscribe	Dec 16th 2012 8 years ago