Attack Against Port 6881?

[Alex Satrapa]

On Wednesday, February 5, 2003, at 09:39 , Andrew Smith wrote:

> Alex, 40bytes/packet * 15 per minute * 60 per hour * 24 hours * 4 
> days = 3.4
> Million bytes (base 10) per errant host.
>
> At that rate it would take quite a lot of hosts to get to 6GB.  Are you 
> sure
> there was no legit traffic which would cause it?

There were at least 10 hosts sending the stuff, and all I've logged is 
the dropped SYN.  They could also have been pinging my connection as 
fast as 3 times a second, and sending unknown quantities of UDP traffic 
my way.

One option I have is to pursue the user's ISPs over in the USA and 
Netherlands for a damages bill of $60 each, but I'm not sure how far 
that would get me.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 225 bytes
Desc: not available
Url : http://lists.samba.org/archive/linux/attachments/20030205/046d44c3/attachment.bin