NukeSentinel is making overtime!

Hangin' Around Joined: Feb 20, 2007 Posts: 32

Not really an issue... but: NukeSentinel on my server is making overtime at the moment. I am being attacked by about 10 scriptkiddies per 24h at the moment.

Attacks are coming from all over the world. Most of the attacks are aimed at coppermine, but also admin access is tried.

Does anybody know if my site is listed somewhere?

First it was an attack once and a while, but at the moment about 10 per 24h.

Should I start to worry? Does anybody know how my site is found? Is it a simple google search on standard nuke terms?

Posted: Thu Jun 21, 2007 3:21 pm

Check your tracked referrers in Sentinel this might give you an indication if they are finding your site through a search engine and what searches they are doing.

registered · Site Admin Joined: Jun 04, 2004 Posts: 6437

Welcome to the summer of nothing better to do... This happens every year.

I usually contact the host to get the sites removed - the goal is to cause the kiddies more inconvenience than their attacks cause me.

registered · Posted: Thu Jun 21, 2007 8:43 pm

Once your site gets indexed by the major search engines, it can be found rather easily by malicious botnets trying to exploit everything. One thing to do is block libwww-perl with .htaccess - that will slow these down considerably.