Attack Against Port 6881?
Alex Satrapa
grail at goldweb.com.au
Wed Feb 5 10:25:44 EST 2003
On Wednesday, February 5, 2003, at 09:39 , Andrew Smith wrote:
> Alex, 40bytes/packet * 15 per minute * 60 per hour * 24 hours * 4
> days = 3.4
> Million bytes (base 10) per errant host.
>
> At that rate it would take quite a lot of hosts to get to 6GB. Are you
> sure
> there was no legit traffic which would cause it?
There were at least 10 hosts sending the stuff, and all I've logged is
the dropped SYN. They could also have been pinging my connection as
fast as 3 times a second, and sending unknown quantities of UDP traffic
my way.
One option I have is to pursue the user's ISPs over in the USA and
Netherlands for a damages bill of $60 each, but I'm not sure how far
that would get me.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 225 bytes
Desc: not available
Url : http://lists.samba.org/archive/linux/attachments/20030205/046d44c3/attachment.bin
More information about the linux
mailing list