Re: [MLUG] DOS Attacks

[John Engelbrecht <EMAIL:PROTECTED>]

No it is different ISPs that i haven't seen, a few are like
attbi.com where the worms are hitting me from, It started
on the 7th when I came back home,
now I guess things has claimed down.


On Thu, 10 Jul 2003 EMAIL:PROTECTED wrote:

> Have you noticed if any of those rules can be combined? Is there an entire
> subnet that is hitting regularly?
>
> Looks like your friend there is Anthony Lamhaak of Austin, MN may wanna give
> his mom a call.
> --- John Engelbrecht <EMAIL:PROTECTED> wrote:
> > I seems like there's has been alot of DOS
> > attacks,
> >
> > i keep banning IP addresses that is listed
> > in iptraf that are possible DOS attackers.
> >
> > 68.155.13.248 is my last one.
> >
> > Does anyone else have this problem?
> >
> >
> > TCP Connections (Source Host:Port)   Packets   Bytes Flags  Iface
> > proxy.west-call.com:4665         >     937     48724 --A-    eth0
> > technaut.darktalker.net:55568    >    1284   1924552 --A-    eth0
> >
> > this record is with in a 1 minute period
> > on iptraf, this is where it stopped once I banned it.
> >
> > oh yea, because of all this IP or network address banning,
> > the iptables script takes a minute to run, it is no longer
> > instant.
> >
> >
> > _______________________________________________
> > members mailing list
> > EMAIL:PROTECTED
> > http://mlug.missouri.edu/mailman/listinfo/members
>
>
> =====
> --
> proticon konijntjesbroek (arlo gittings) KC0MNN
> proticon at yahoo dot com
> MOSLUG Home http://www.moslug.org
>
> __________________________________
> Do you Yahoo!?
> SBC Yahoo! DSL - Now only $29.95 per month!
> http://sbc.yahoo.com
> _______________________________________________
> members mailing list
> EMAIL:PROTECTED
> http://mlug.missouri.edu/mailman/listinfo/members
>
_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members