SV: SV: Breakin attempt
-----Oprindelig meddelelse-----
Fra: owner-freebsd-questions@freebsd.org
[mailto:owner-freebsd-questions@freebsd.org] P=E5 vegne af Peter N. M.
Hansteen
Sendt: den 26 oktober 2011 19:14
Til: freebsd-questions@freebsd.org
Emne: Re: SV: Breakin attempt
"Admin ValhallaProjectet" <admin@thorshammare.org> writes:
> Probably a bunch of bots. Not very intelligent used.
It's a recurring phenomenon, sometimes called the "hail mary cloud" (the
odds are overwhelmingly against such things ever succeeding, but they =
keep
trying anyway).
> Really messed up my logfiles. I was a bit curious if the purpose was=20
> just that, to mask some more clever real attacks, but haven't seen any =
> signs of such.
> I changed my ssh port, just to reduce the noise, and it all ceased.
This round was over a lot quicker than the ealier ones, see eg
http://www.bsdly.net/~peter/hailmary/ and the inital blog post about the
phenomenon,
http://bsdly.blogspot.com/2008/12/low-intensity-distributed-bruteforce.ht=
ml
- Peter
--
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to =
"freebsd-questions-unsubscribe@freebsd.org"
-----------------------------------------------
Very interesting reading. Thanks.
/Hasse
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"