An IP pivoting from inside the Russian Federation took down my blog earlier today. It's on a cheap shared hosting server so a DDOS against is pretty trivial. Then they tried for about an hour using a sql injection attack which didn't work. I kind of shrugged.
Sam Liles
Selil Blog
Don't forget to duck Secret Squirrel
The scholarship of teaching and learning results in equal hatred from latte leftists and cappuccino conservatives.
All opinions are mine and may or may not reflect those of my employer depending on the chance it might affect funding, politics, or the setting of the sun. As such these are my opinions you can get your own.
I just got one today, I joined in 2009.
I had only made one post, the attacker is (along with what ever else their doing) probably going through the membership list (if one is not available probably auto-created one by having something auto load every single thread) aiming at low post counts perhaps hoping they lead to abandoned e-mail addresses so more attack attempts can be made.
I'll forward the password attempt notification to the webmaster address to add to the IP block.
Hopefully they weren't spoofed IP / belonging to any current members though they can always access through some other network. And IPs change a lot. Though that kind of worry shouldn't be a biggie.
The blocks are good and will force a persistent attacker to make more movements and create a bigger foot print.
Thanks for this thread, benevolent wishes to everyone's endeavors and hopes for 2015.
- blath
Correction: I did get one. I was notified via email yet I have nothing in my SWJ inbox. I'm kinda Irked by it.
Posting Permissions
Bookmarks