Angus Robertson - Magenta Systems Ltd wrote: > My various web servers suffer regular attacks looking for exploits, > the current one is looking for php, 100 odd URLs at a time including: > > GET //dbadmin/scripts/setup.php > GET //phpMyAdmin-2.5.5-rc1/scripts/setup.php > GET //mysqlmanager/scripts/setup.php > GET /muieblackcat > > In my ICS web server, I was wondering what sort of creative response I > could make to these requests, to annoy or slow down the hackers?
I would implement a short-time IP-blacklist. Those attacks are very common, I see them daily (even) on a dynamic IP. Most of them here probe for open proxies. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be