3 ms·
So this applies to only 8 individuals and 4 entities that have been caught in the act. I wonder what's the number of attacks that are successful and never detec
by imiric 5y ago
So this applies to only 8 individuals and 4 entities that have been caught in the act. I wonder what's the number of attacks that are successful and never detected, or never publicly acknowledged.
There need to be more widespread measures taken against the source networks implicated in the attacks. Anyone who's ever monitored the logs of any public facing web service knows that it's immediately and constantly probed for popular vulnerabilities (Drupal, Wordpress, etc.) coming from mostly Chinese IPs. These are low effort bots no doubt and not coordinated attacks, but something should be done at the ISP or country level to block this traffic. It's unreasonable that every single service needs to implement its own mitigation techniques (fail2ban, etc.).