Full Disclosure mailing list archives

Re: Brute force attack - need your advice


From: Paul Schmehl <pauls () utdallas edu>
Date: Mon, 11 Feb 2008 15:32:12 -0600

--On Tuesday, February 12, 2008 02:16:02 +0530 Abilash Praveen 
<contactme () abilashpraveen com> wrote:


Hello experts,

I had been talking to our web hosts the other day and they seem to have a lot
of unusual brute force attack on the servers recently. I'm guessing that it
could be because of my emails to the list? I mean, do you advice on using a
personal email for this type of list? Or should I use something like
@gmail.com? I know they can't easily break in to our servers, but am I just
giving them a chance?


The chances of your little corner of the web being singled out for attack are 
pretty low.  Besides, the level of pure crap flying around on the internet 
makes it nearly impossible to distinguish a directed attack from the usual 
garbage.  So, you do your best to properly configure and secure everything, 
keep good logs and sit back and watch the crap fly.

-- 
Paul Schmehl (pauls () utdallas edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: