Just before I get down to my Friday Business, popped up the dashboard
for our Distributed Feedback System (DFS) to get a comparison of the
Brute Force attack vector..
The numbers are an indicator for comparison purposes only.
There of course would be a lot more bot attacks, but many are trying to
attack ports that we know they shouldn't be, so are already dropped
before the feedback system can count/report them.
The pgHammer continues to lead in the sheer volume of attempts, but is
down to only 271 servers still operational. (Amazon, five are still on
your network)
Name Hits Unique IP(s)
.......................................................................
pgHammer 69410 271
Static Vietnamese Bots 10477 5364
Smart Cutwail 7699 17
Older Cutwail 4947 1433
Compromised Ubiquiti 4607 3914
Asian Big Dynamic IP(s) 4184 2105
Compromised Cisco Routers 3419 2809
Compromised WRT Routers 3382 2952
Vietel Specific 1728 1396
Compromised Linux NotIdentified 1435 78
Sextortion Spammer 1298 546 (Spam)
Winbot 1284 476
Compromised MikroTik 543 491
Now this doesn't of course include all of the ones we track, but rather
some of the 'smarter' ones that aren't so obvious that they have been
blocked long ago..
But thought it would be interesting enough to post here.
Have a save and happy weekend all.. Remember, lock your mailboxes..
-- Michael --
PS, Thanks to those that have helped reduce the number of pgHammer
compromised servers..
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
