Date: Wed, 26 Oct 2011 22:01:24 +0200 From: "Hasse Hansson" <fbsd@thorshammare.org> To: "'Peter N. M. Hansteen'" <peter@bsdly.net>, <freebsd-questions@freebsd.org> Subject: SV: SV: Breakin attempt Message-ID: <000801cc941a$0d0629b0$27127d10$@org> In-Reply-To: <87ehxzd6ar.fsf@deeperthought.bsdly.net> References: <000801cc933c$60776520$21662f60$@org> <87ehxzd6ar.fsf@deeperthought.bsdly.net>
next in thread | previous in thread | raw e-mail | index | archive | help
-----Oprindelig meddelelse----- Fra: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-questions@freebsd.org] P=E5 vegne af Peter N. M. Hansteen Sendt: den 26 oktober 2011 19:14 Til: freebsd-questions@freebsd.org Emne: Re: SV: Breakin attempt "Admin ValhallaProjectet" <admin@thorshammare.org> writes: > Probably a bunch of bots. Not very intelligent used. It's a recurring phenomenon, sometimes called the "hail mary cloud" (the odds are overwhelmingly against such things ever succeeding, but they = keep trying anyway). > Really messed up my logfiles. I was a bit curious if the purpose was=20 > just that, to mask some more clever real attacks, but haven't seen any = > signs of such. > I changed my ssh port, just to reduce the noise, and it all ceased. This round was over a lot quicker than the ealier ones, see eg http://www.bsdly.net/~peter/hailmary/ and the inital blog post about the phenomenon, http://bsdly.blogspot.com/2008/12/low-intensity-distributed-bruteforce.ht= ml - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds. _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org" ----------------------------------------------- Very interesting reading. Thanks. /Hasse
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000801cc941a$0d0629b0$27127d10$>