Web attacks

Monday, October 13th, 2003

We’re back home again, and I just looked over my log of web attacks for the past 30 days. I was getting about 1000 attacks per day until I blacklisted the top 10 attackers and now I’m down to about 150 attacks per day. That’s a bit more manageable.

Wednesday, October 15th, 2003

After taking over the DNS for www.finninday.net, I’ve seen the web attacks seen by snort go from about 100 per day to over 2000 per day. Time to do some more blacklisting. Or maybe I’ll try out some more proactive behavior modification. I was thinking that maybe I could do an http redirect on some of the naughty bits that everyone is poking at to someplace that would slow them down a bit, like playboy.com. I wonder if anyone is counting the IIS attacks who might actually want to have the attacks redirected to them. I’ll have to look that up.