HangingChad writes: "Yesterday SANS highlighted 4 separate reports of an increase in ssh bruteforce attacks. From the article: "The isc.sans.org port 22 graph supports this as there has been a large increase in the source hosts seen in ssh scans during this month." There is speculation that this is part of a distributed, coordinated attack. I'm getting hearsay reports from some of my admin buddies that they're seeing ssh dictionary attacks today. Anyone else experiencing unusual ssh traffic the last couple days?"