Network attack - so what? Post: 302386492

Sponsored Content

Special Forums Cybersecurity Network attack - so what? Post 302386492 by Action on Tuesday 12th of January 2010 02:34:15 PM

01-12-2010

Registered User

Quote:

Originally Posted by Neo

This question cannot be answered unless you describe the nature of the attack.

Your question is so vague, that we have no idea, really what you are talking about. A web attack? An SSH login attempt? A simple scan? Spam? What kind of attack?

Why would you ask such a question without providing any details and expect to get a useful answer?

Sorry.
To provide more details, with "attack" i meant SSH brute force - somebody tries to login as "Administrator" or with other users over SSH for many times. I think the IPs are always dynamic. To spam, what do you think of offers on the Web to subscribe for spam and of using it to spam spammers? Using email aliases, it would be possible. And, i didn't know (email) spam is considered as an attack.
To make my question in the first posting more precise: did I understand it right that for an attacker there will be no consequences?

Action

View Public Profile for Action

Find all posts by Action

7 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Bruteforce attack on my pc

since putting my pc online, it keeps getting slower and i dig the logfile to have such a surprise: this is just one of a many and I beleived it's a bruteforce attack how do i block this IP 200.41.81.228 from trying to knock my online pc? my system: FreeBSD testing.net 6.2-STABLE-JE...

2. Cybersecurity

Replay Attack

REPLAY ATTACK. Can some one elobrate on measures to encounter this problem of replay atack on network.

3. IP Networking

Bizzare network attack?

A server I host is having very rare glitches where a file the user downloads will have incorrect contents. This almost never happens when I am looking, I caught it once and only once -- a user messaged me saying his antivirus had given him a warning about an image file downloaded from his...

4. Cybersecurity

What I think is a DoS attack

About 3 days ago our Apache logs started filling with the following errors: mod_ssl: SSL handshake failed (server <weberver>:443, client 41.235.234.172) (OpenSSL library error follows) OpenSSL: error:1408A0B7:SSL routines:SSL3_GET_CLIENT_HELLO:no ciphers specified These initially were...

5. Cybersecurity

Found attack from

Hi, I have a belkin router installed and a look at the security log has got me worried a little bit. Security log: Fri Jan 29 20:41:46 2010 =>Found attack from 68.147.232.199. Source port is 58591 and destination port is 12426 which use the TCP protocol. Fri Jan 29 20:41:46 2010 ...

6. Cybersecurity

UUCP attack?

Is this an attack attempt? I got an e-mail from 'uucp Admin' last night and again this morning: What does it mean and what can I do about it? Thanks

7. Emergency UNIX and Linux Support

DDOS attack please help!

Dear community, my site was recently attacjed by DDOS technique and goes down in a few minutes. My site runs under Debian/Apache2/Mysql. I identified the IPs who attack me and block it through iptable firewall from debian. Something like: iptables -D INPUT -s xxx.xxx.xxx.xxx -j DROP This...

LEARN ABOUT SUSE

mail::spamassassin::plugin::spamcop

Mail::SpamAssassin::Plugin::SpamCop(3)			User Contributed Perl Documentation		    Mail::SpamAssassin::Plugin::SpamCop(3)

NAME

       Mail::SpamAssassin::Plugin::SpamCop - perform SpamCop reporting of messages

SYNOPSIS

	 loadplugin	Mail::SpamAssassin::Plugin::SpamCop

DESCRIPTION

       SpamCop is a service for reporting spam.  SpamCop determines the origin of unwanted email and reports it to the relevant Internet service
       providers.  By reporting spam, you have a positive impact on the problem.  Reporting unsolicited email also helps feed spam filtering
       systems, including, but not limited to, the SpamCop blacklist used in SpamAssassin as a DNSBL.

       Note that spam reports sent by this plugin to SpamCop each include the entire spam message.

       See http://www.spamcop.net/ for more information about SpamCop.

USER OPTIONS

       spamcop_from_address add@ress.com   (default: none)
	   This address is used during manual reports to SpamCop as the From: address.	You can use your normal email address.	If this is not
	   set, a guess will be used as the From: address in SpamCop reports.

       spamcop_to_address add@ress.com	 (default: generic reporting address)
	   Your customized SpamCop report submission address.  You need to obtain this address by registering at "http://www.spamcop.net/".  If
	   this is not set, SpamCop reports will go to a generic reporting address for SpamAssassin users and your reports will probably have less
	   weight in the SpamCop system.

       spamcop_max_report_size	 (default: 50)
	   Messages larger than this size (in kilobytes) will be truncated in report messages sent to SpamCop.	The default setting is the maximum
	   size that SpamCop will accept at the time of release.

perl v5.12.1							    2010-03-16				    Mail::SpamAssassin::Plugin::SpamCop(3)