From owner-freebsd-security Mon May 24 8:30:48 1999 Delivered-To: freebsd-security@freebsd.org Received: from lariat.lariat.org (lariat.lariat.org [206.100.185.2]) by hub.freebsd.org (Postfix) with ESMTP id 5F48B14C8C for ; Mon, 24 May 1999 08:30:44 -0700 (PDT) (envelope-from brett@lariat.org) Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.lariat.org [206.100.185.2]) by lariat.lariat.org (8.9.3/8.9.3) with ESMTP id JAA03885; Mon, 24 May 1999 09:29:06 -0600 (MDT) Message-Id: <4.2.0.37.19990524092545.0474cd50@localhost> X-Sender: brett@localhost X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.37 (Beta) Date: Mon, 24 May 1999 09:28:08 -0600 To: Joao Assad , freebsd-security@FreeBSD.ORG From: Brett Glass Subject: Re: Denial of service attack from "imagelock.com" In-Reply-To: <37492DE5.2822267@domain.com.br> References: <199905231424140440.0E81E3D5@quaggy.ursine.com> <4.2.0.37.19990523191423.04639500@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 10:45 AM 5/24/99 +0000, Joao Assad wrote: >In my logs I see a 10 secs interval between each request. In some of the ones I administer, it was 3 seconds or less. And it ramps up, as if one of their scavengers feeds URLs to the others. So much for the 3-10 minutes they claim! --Brett Glass To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message