nanog mailing list archives
DoS on ftp port
From: Brian Wilson <wilson () unity ncsu edu>
Date: Tue, 21 May 2002 08:27:02 -0500 (CDT)
Just wondering if anyone else has seen this happen recently: https://uni01nf.unity.ncsu.edu/ncsu/usage/io-fps-service-daily.html We maxed out at about 10,000 flows/sec. I'm currently going back through our argus logs and collecting a list of source hosts (all appear to be spoofed of course). In a 15 minute period we had 4.2 million unique hosts pounding one of our servers. The only reason I post this is that on some other off-campus machines I maintain, I've seen an increase in ftp connections. So, I was wondering if this is some new worm, ddos, or something of that nature. If anyone would care to comment, I'm all ears. Brian -- Brian Wilson wilson () ncsu edu Network Analyst W: 919.513.3472 Communication Technologies F: 919.513.1893 North Carolina State University http://www.ncstate.net
Current thread:
- DoS on ftp port Brian Wilson (May 21)
- Re: DoS on ftp port Brian Wilson (May 21)
- Re: DoS on ftp port Stephen J. Wilcox (May 21)
- Re: DoS on ftp port Rob Thomas (May 21)
- Re: DoS on ftp port David Charlap (May 21)
- Re: DoS on ftp port Anthony D Cennami (May 21)
- Re: DoS on ftp port David Charlap (May 21)
- Re: DoS on ftp port Brian Wilson (May 21)