Re: [MLUG] DOS Attacks

["Daniel Nowlin" <EMAIL:PROTECTED>]

I am getting allot of script kiddies doing IIS attempts (W2K box running
Xitami).  I just drop all ping requests.

Dan

----- Original Message ----- 
From: "John Engelbrecht" <EMAIL:PROTECTED>
To: "MLUG Members" <EMAIL:PROTECTED>
Sent: Wednesday, July 09, 2003 1:52 PM
Subject: Re: [MLUG] DOS Attacks


> Wow, i guess based on the response,  I guess no one else is getting
> Denial Of Service attacks.
>
> I'm probably talking to myself.
> Alwell, it isn't a big deal, I'm not stuck on anything.
>
> On Wed, 9 Jul 2003, John Engelbrecht wrote:
>
> > I seems like there's has been alot of DOS
> > attacks,
> >
> > i keep banning IP addresses that is listed
> > in iptraf that are possible DOS attackers.
> >
> > 68.155.13.248 is my last one.
> >
> > Does anyone else have this problem?
> >
> >
> > TCP Connections (Source Host:Port)   Packets   Bytes Flags  Iface
> > proxy.west-call.com:4665         >     937     48724 --A-    eth0
> > technaut.darktalker.net:55568    >    1284   1924552 --A-    eth0
> >
> > this record is with in a 1 minute period
> > on iptraf, this is where it stopped once I banned it.
> >
> > oh yea, because of all this IP or network address banning,
> > the iptables script takes a minute to run, it is no longer
> > instant.
> >
> >
> > _______________________________________________
> > members mailing list
> > EMAIL:PROTECTED
> > http://mlug.missouri.edu/mailman/listinfo/members
> >
> _______________________________________________
> members mailing list
> EMAIL:PROTECTED
> http://mlug.missouri.edu/mailman/listinfo/members
>

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members