The Register® — Biting the hand that feeds IT

Feeds

Oracle UK systems accused in 'SSH hacking spree'

Database giant investigates DenyHosts reports

5 ways to reduce advertising network latency

Compromised computers at Oracle UK are listed among the 10 worst offenders on the net for launching attacks on servers which run SSH (secure shell) server software.

Oracle said it is investigating the reported problem, which it is yet to either confirm or refute.

A box (or group of boxes behind a proxy) at Oracle UK is among the worst offenders for launching attacks, according to statistics from servers running DenyHosts software to block SSH brute-force password attacks.

DenyHosts is a script for Linux system administrators designed to help thwart SSH server attacks. Around 6,800 users contribute to the data it collects.

The compromised Oracle boxes - recorded as active since 3 May - feature at number nine on DenyHosts' list. The listing implies a computer (or multiple computers) at Oracle UK have been compromised for weeks allowing hackers to enjoy access to Oracle's bandwidth in order to hack other boxes elsewhere on the net.

For a firm that prides itself on building a "reputation for delivering many of the industry's most secure solutions", this is surely unacceptable.

In response to Register inquiries, Oracle supplied a statement saying that an ongoing investigation is yet to confirm whether its systems have been misused or not.

"Security is a matter Oracle takes seriously and the company's first priority is meeting customer needs and reducing their risk. As soon as Oracle became aware of the situation an investigation began, which is ongoing, but to date the company has found no evidence for any SSH brute-force attack originating from the Oracle owned machine currently listed on the DenyHosts website." ®

5 ways to prepare your advertising infrastructure for disaster

Whitepapers

Microsoft’s Cloud OS
System Center Virtual Machine manager and how this product allows the level of virtualization abstraction to move from individual physical computers and clusters to unifying the whole Data Centre as an abstraction layer.
5 ways to prepare your advertising infrastructure for disaster
Being prepared allows your brand to greatly improve your advertising infrastructure performance and reliability that, in the end, will boost confidence in your brand.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Email delivery: Hate phishing emails? You'll love DMARC
DMARC has been created as a standard to help properly authenticate your sends and monitor and report phishers that are trying to send from your name..
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?

More from The Register

next story
500 MEELLION PCs still run Windows XP. How did we get here?
Just six months to go: what to do if you don't have $200 per PC
'200 million' fanbois using iOS 7 just a week after release - study
Plus: Most US iDevice users are drinking Cupertino's latest Koolaid
App Store ratings mess: What do we like? Sigh, we dunno – fanbois
How do I know what to download if I don't know what everyone else is doing?
Windows 8 fans out-enthuse Apple fanbois
Redmond allows 81 Win 8 devices to use one user ID, solving side-loading shemozzle
Launchpads, catapults... what a load of - WAIT, there's £15m for grabs?
Quango sprinkles cash on games, animation and trendy meeja types
Apple iOS 7 makes some users literally SICK. As in puking, not upset
'Eye candy really is as bad as classical candy is for the teeth,' writes one
Google reveals its Hummingbird: Fly, my little algorithm - FLY!
Update brings Googleplex one step closer to sentience
Oracle hides ExaLogic price cut
Old price lists prove price halved, so why has Big Red deleted the post announcing it?
prev story