nanog mailing list archives
Re: Worm probes
From: Joe Abley <jabley () automagic org>
Date: Tue, 18 Sep 2001 11:49:03 -0400
On Tue, Sep 18, 2001 at 11:05:35AM -0400, up () 3 am wrote:
ugh...this is way more impact...a 128k ISDN customer running an NT/Win2k box is at 100% BW, and my 2x T1's are at about 2x normal traffic for this time of day, although still well short of capacity...apache server processor load is WAY up just from the requests, and the logs are growing like mad.
I'm sitting behind a dialup box right now, and I just added a log clause to an ipf rule matching connection attempts to port 80. I'm averaging 35 probes per minute. Blocking them is quite beneficial to performance on a v.34 connection :) Joe
Current thread:
- RE: Worm probes, (continued)
- RE: Worm probes Tim Winders (Sep 18)
- Re: Worm probes Jared Mauch (Sep 18)
- Re: Worm probes Bill Larson (Sep 18)
- Re: Worm probes Christopher X. Candreva (Sep 18)
- Re: Worm probes Bill Larson (Sep 18)
- Re: Worm probes sigma (Sep 18)
- Re: Worm probes Valdis . Kletnieks (Sep 18)
- RE: Worm probes Eric Germann (Sep 18)
- Re: Worm probes Ulf Zimmermann (Sep 18)
- Re: Worm probes k claffy (Sep 18)
- Re: Worm probes Joe Abley (Sep 18)
- Re: Worm probes Daniel Senie (Sep 18)
- Re: Worm probes Iljitsch van Beijnum (Sep 18)
- Re: Worm probes M. David Leonard (Sep 19)
- Re: Worm probes Brett Frankenberger (Sep 19)
- Re: Re[2]: Worm probes Nick Thompson (Sep 18)