Ron Joffe wrote:

> Anyone else seeing a large increase it attacks lately?

Yep, has lasted 4 days and it comes from a very large bot net.

It tries once from every bot, eventually it repeats so right now I see 
mostly "connection refused" (after DH added about 300 new IP addresses).

It has also been reported elsewhere (fail2ban list).

> I just looks at the stats page :
>   http://stats.denyhosts.net/stats.html
> 
> And it also shows a spike.
> 
> Any ideas ?

A hacker-kiddie with a new toy... look dudes, distributed attack ! or a 
real gangster trying his new weapons.

What seems impressive is the number of bots.  If they did this 
simultaneously, instead of every couple of minutes (but the frequency 
has been varying, today is faster), they could do real damage (of the 
DoS kind).  So many hacked computers (the bots), and most are static 
addresses from what seems to be legitimate enterprises.
-- 
René Berber


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft 
Defy all challenges. Microsoft(R) Visual Studio 2008. 
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Denyhosts-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to