Re: [nsp] UDP 1015

From: dhudson (dhudson@pilot.net)
Date: Tue Nov 14 2000 - 14:47:26 EST


Andrew,

this is an trojan ddos exploit named 'doly'.

piranha...for a reason

Andrew wrote:
>
> Is this on an @home pipe? It doesn't mean it's spoofed. Someone could be
> leaking 192.168/16, could be OOB junks, or could be spoofs.
>
> At 01:06 PM 11/14/00 -0500, Angelo Neacsu wrote:
> >I get this on my logs:
> >
> >list 143 denied udp 192.168.102.1(1015) (Ethernet1/0 0060.520b.5a77) ->
> >255.255.255.255(1015), 726 packets
> >
> >Why ?
> >Is this an attack from a spoofed IP ?
> >
> >---
> >Angelo Neacsu
> >Mediafax
> >
> >"If you want to travel around the world and be invited to speak at a lot
> >of different places, just write a Unix operating system."
> >(By Linus Torvalds)

-- 

--------------------------------------------------- my lord tzu, running away is the first martial tao archery sifu to sun tzu ---------------------------------------------------



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:21 EDT