Full Disclosure mailing list archives

Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123)


From: Jann Horn <jann () thejh net>
Date: Sat, 17 Aug 2013 15:29:04 +0200

On Fri, Aug 16, 2013 at 02:58:41PM -0300, Luther Blissett wrote:
On Fri, 2013-08-16 at 19:31 +0200, Jann Horn wrote:

Let me google that for you. Hmm. Assigned to "Polipo Web proxy". So maybe
someone tried to connect to them through your exit node and they do proxyscans
on people who connect to them?



Sorry but I did not understand this. I had already said it was attempt
on polipo. What exactly was so dumb in my phrasing that required you to
rephrase it?

Nothing, I didn't see that you had already looked up what port that is. Sorry
about that.


Before the packet storm,

Oooh, a storm!


Ok, maybe it was just a light wind and my system is the most laughable
one.

Or maybe it was a light but dangerous wind. :P


Anyway, sorry for the tone in my mail – as others pointed out, it was
inappropriate. :/

Well, I hope you can figure out what caused every pair of bytes to be swapped
in that logfile line (the one where you posted the hexdump).

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: