Patent ID: 8776217

Claim:
A method for detecting unwanted traffic received by a target victim, the target victim having one or more destination addresses, the method comprising the steps of: maintaining a rule base identifying one or more string expressions; analyzing one or more error entries in a log file, said log file comprising one or more requests received by said target victim, wherein said one or more error entries correspond to an unsuccessful attempt by an attacker to access a stored location of one or more files maintained by said target victim; determining if one or more requests associated with at least one of said unsuccessful attempt error entries include a string that matches one or more of said string expressions in said rule base associated with one or more predefined protected files; and sending a denunciation message to a central filter if said one or more requests associated with at least one of said unsuccessful attempt error entries include a string that matches one or more of said string expressions in said rule base associated with one or more predefined protected files.