Web attacks

Wednesday, October 15th, 2003

After taking over the DNS for www.finninday.net, I’ve seen the web attacks seen by snort go from about 100 per day to over 2000 per day. Time to do some more blacklisting. Or maybe I’ll try out some more proactive behavior modification. I was thinking that maybe I could do an http redirect on some of the naughty bits that everyone is poking at to someplace that would slow them down a bit, like playboy.com. I wonder if anyone is counting the IIS attacks who might actually want to have the attacks redirected to them. I’ll have to look that up.