Since attempts to shut these attacking bots down by reporting the source IPs seem to be ineffective, how about using an iptables ruleset that tracks the abusing IPs, and if they fall into that category, put the connection into a tarpit so the scripts stop scanning and guessing?
I suppose this would just make the script kiddies use a timeout of some kind, but it seems more satisfying to at least attempt to tie up the resources of these scripted attack bots.
Slashdot Mirror
What's the model number on that Xerox, and where did you get it for $200? Was it the Phaser 6120?
Since attempts to shut these attacking bots down by reporting the source IPs seem to be ineffective, how about using an iptables ruleset that tracks the abusing IPs, and if they fall into that category, put the connection into a tarpit so the scripts stop scanning and guessing? I suppose this would just make the script kiddies use a timeout of some kind, but it seems more satisfying to at least attempt to tie up the resources of these scripted attack bots.