Analyzing Malicious SSH Login Attempts

by Christian Seifert
Sept. 15, 2017 1 comment Symantec Detection & Response

Malicious SSH login attempts have been appearing in some administrators' logs for several years. This article revisits the use of honeypots to analyze malicious SSH login attempts and see what can be learned about this activity. The article then offers recommendations on how to secure one's system against these attacks.

Steven Ulm 8 months ago

Good analysis! It raises more than awareness - it also provides good solutions! Thank you for sharing it with us!