Slashdot Mirror
The Low-Intensity, Brute-Force Zombies Are Back
Peter N. M. Hansteen writes "In real life, zombies feed off both weak minds and the weak passwords they choose. When the distributed brute-force attempts stopped abruptly after a couple of months of futile pounding on ssh servers, most of us thought they had seen sense and given up. Now, it seems that they have not; they are back. 'This can only mean that there were enough successful attempts at guessing people's weak passwords in the last round that our unknown perpetrators found it worthwhile to start another round. For all I know they may have been at it all along, probing other parts of the Internet ...' The article has some analysis and links to fresh log data."
...unless they are only attacking from my existing list of blocked IP addresses.
http://michaelsmith.id.au
...you mean zombie PROGRAMS. Damn.
[puts shotgun down]
I've now changed my password from Thomas to ThomasX, where X is a digit that I'm not telling.
Does having a witty signature really indicate normality?
" I run log-guardian.pl to "3 strikes - you're out" the idiots who do the brute-forces by putting them into iptables"
Good to know that if I spoof your IP address I'll prevent you from login your own machines.
"aplay -t raw" for the truly over-the-edge!