[U.Support]

I have my first (BIG) denial of service attack. It was fun

The main port it was hitting was (13733)tcp and came from many different computers and a few servers. I ran (netstat -a)   to find out what port it was.

I blocked the port and everything was fine......

:owned



2006-08-16 20:49:10 OPEN-INBOUND TCP 170.215.213.149 -------------- 3578 13733 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 80.41.215.123 -------------- 1642 13733 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 80.41.215.123 13733 1640 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 68.228.44.212 -------------- 1233 13733 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 68.228.44.212 13733 1231 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 68.228.44.212 -------------- 1234 13733 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 80.41.215.123 13733 1641 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 68.228.44.212 13733 1232 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 201.123.159.99 13733 3380 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 170.215.213.149 13733 3576 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 201.123.159.99 -------------- 3382 13733 - - - - - - - - -
2006-08-16 20:49:10 CLOSE UDP -------------- 68.142.232.32 27778 27243 - - - - - - - - -
2006-08-16 20:49:10 CLOSE UDP -------------- 68.142.232.33 27778 27243 - - - - - - - - -
2006-08-16 20:49:10 CLOSE UDP -------------- 68.142.232.33 27779 27243 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 68.228.44.212 -------------- 1235 13733 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 68.228.44.212 13733 1233 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 80.41.215.123 -------------- 1643 13733 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 68.228.44.212 -------------- 1236 13733 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 68.58.202.148 13733 1063 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 68.228.44.212 13733 1234 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 170.215.213.149 -------------- 3580 13733 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 68.228.44.212 -------------- 1238 13733 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 201.123.159.99 -------------- 3383 13733 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 80.41.215.123 -------------- 1645 13733 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 201.123.159.99 13733 3381 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 80.41.215.123 13733 1642 - - - - - - - - -
2006-08-16 20:49:10 OPEN-INBOUND TCP 68.228.44.212 -------------- 1239 13733 - - - - - - - - -
2006-08-16 20:49:10 CLOSE TCP -------------- 68.228.44.212 13733 1235 - - - - - - - - -
2006-08-16 20:49:11 CLOSE TCP -------------- 68.228.44.212 13733 1236 - - - - - - - - -
2006-08-16 20:49:11 OPEN-INBOUND TCP 68.228.44.212 -------------- 1240 13733 - - - - - - - - -
2006-08-16 20:49:11 OPEN-INBOUND TCP 24.90.29.209 ------------------ 4280 13733 - - - - - - - - -
2006-08-16 20:49:11 OPEN-INBOUND TCP 201.123.159.99 --------------- 3384 13733 - - - - - - - - -
2006-08-16 20:49:11 OPEN-INBOUND TCP 68.228.44.212 -------------- 1241 13733 - - - - - - - - -
2006-08-16 20:49:11 CLOSE TCP 24.------------ 80.41.215.123 13733 1643 - - - - - - - - -

[dr_amado]

letee?

[U.Support]

same thing i was thinking.

Im guessing it was a newbie that just learned how.

[jmslimx]

what command did you run?

[defusion]

what command did you run?

to do what? ask your questions more specifically