Re: UDP flood
David Herren-Lage <[email protected]> Wed, 5 Feb 2014 07:38:52 -0500
| Newsgroups | gmane.comp.macosx.admin |
|---|---|
| Message-ID | <[email protected]> |
On Feb 4, 2014, at 11:01 PM, LuKreme <kremels-/[email protected]> wrote: > = > On 04 Feb 2014, at 11:12 , David Herren <[email protected]> wrote: > = >>> 192.27.80.161:55747 > = > owned by Raytheon. > = >>> 95.172.65.81:5132 > = > Owned by Internap (which is something like Akami). I didn't have any luck finding the above. Thanks! > Without more information, it=92s hard to guess. Are you running a DNS ser= ver? Is it publicly available? Nope, No DNS server. > Chances are good that you are being used as a reflector/multiplier for a = UDP DDOS if the amount of traffic is really a large number, but that=92s ju= st a guess. Any suggestions on how to determine that? And if it's so, how the heck to I= fix it? /david -- david herren-lage - shoreham, vt, us na terra solsys orionarm Candidate for 11th Commandment: "Thou shalt not confuse text with love."