mushorg / glutton

Generic Low Interaction Honeypot
MIT License
244 stars 57 forks source link

BrickerBot #64

Open glaslos opened 7 years ago

glaslos commented 7 years ago

Has anyone seen events that look like those described here? https://security.radware.com/ddos-threats-attacks/brickerbot-pdos-permanent-denial-of-service/

gento commented 7 years ago

this looks like attacking port TCP/22. I don't see these similar chain of commands in Glutton TCP/23 ; )

The PDoS attempts originated from a limited number of IP addresses spread around the world. All devices are exposing port 22 (SSH) and running an older version of the Dropbear SSH server

glaslos commented 7 years ago

The bricked devices or the devices doing the bricking?