4 Months = 10,348 Hack Attempts = 10,348 Failures

[Tiberius]

On 17th April 2012, I started logging all attempts to gain access to our server. 4 months have passed, and a total of 10,348 attempts were made. Suffice to say, all of them failed.

Here is an analysis of the passwords they tried: http://atheistforums.org/honeypot-analysis.txt

From the passwords used, I predict that most of the attacks were automated, probably a bunch of script-kiddies who had no idea what they were doing. Clearly though, some were actively trying to break into the server. I have their IP addresses, and once I have finished my MSc (few weeks), I will be writing to the owners of them.

Anyway, I thought you might all be interested in knowing how often the server is attacked given our recent downtime. More importantly, it demonstrates how secure the server is (in case you doubted that).

- Tiberius

P.S. Here is the full list of username / password combinations used (in [username/password] format): http://atheistforums.org/honeypot.txt.gz (gzipped)

P.P.S. Safety Dance!
http://www.youtube.com/watch?v=AjPau5QYtYs

[Annik]

It's safe to dance!

[Oldandeasilyconfused]

Tib;

I don't suppose you have a virus which will cause their hard drive to format itself?

If not,let me have some addresses and I will send Guido,our master of arms around to see them. As usual ,Guido be accompanied by Maurice,his hunting ferret. Guido will be be carrying his Gladstone bag,which contains a large pineapple and a small mallet.

[Shell B]

Aw, our wedding song.

Good work, babe.

[Thor]

P.P.S. Safety Dance!
http://www.youtube.com/watch?v=AjPau5QYtYs

Ah, yes.... Men Without Hats!

They should've called themselves "Men With Only One Hit".

[Rayaan]

[Reforged]

10,348 Hack Attempts detected.
Lets not get complacent.
Also, is it really a good idea to broadcast this? You might as well be presenting a challenge to every hacker on the net and promptly sticking a target on your own forehead.

[Shell B]

It's an atheist forum. The target is already there, melodramas are us.

Anyway, this is why you all have secure passwords now. If they do get in, you're all good, aren'tchya?

And who is complacent? All I see is Tibby implementing more and more security measures all the time. First, he had to set it up so he could keep track of this shit. Then, he followed up and let you guys know what is going on in the background here. All of this is after he changed the password policy so our stuff would be safer. I would say he is on the ball before the ball even gets there. So, lighten up.

[Reforged]

I'm not saying thats not praise worthy I'm just saying; if you're being hunted by a pack of rabid dogs in a hostile wilderness you don't strip naked, dip your extremities in BBQ sauce and scream at the top of your voice "HA! THOSE FUCKING MONGRELS STILL HAVEN'T CAUGHT ME!"
I kind of thought it was a good point.

[Shell B]

Oh, it's not a terrible point, but I really doubt they read the forum and Adrian would really be the one to know how secure the server is. I do think we can infer from the above numbers that it's pretty fucking secure.