jdow wrote: > >> We're getting around 60/sec for over 24 hours now :-( >> >> It ain't getting in, but the logs are filling my disk ;-) > > 5 MILLION a day! Who hates Trimble Navigation THAT much? (IMAO they're > fairly good guys. I used to do GPS related work - satellite and ground.) I guess that's my point. I was wondering if this was within the "normal" range of dictionary attacks. I've been tracking (in realtime) the IPs sending to non-existent addresses for the past 2 hours, and we are now over 10K separate IP addresses. Sounds like those MS06-040 trojans release last week found their mark :-(
Running the addresses through GeoIP shows they are all over the world. I guess we just weather the storm :-/ -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
