[LINK] DOS attacks for 24 hours

Glen Turner gdt at gdt.id.au
Sat Jun 16 12:03:13 AEST 2012


On 16/06/12 09:32, Jan Whitaker wrote:
> UDP Packet - Source:87.205.63.20,12142 Destination:...,8500 - [DOS]

> Is there something about port 8500 that is particularly attractive at 
> the moment?

http://www.speedguide.net/port.php?port=8500
My guess would be that someone has discovered a fault in ColdFusion.

> And why would they be coming back to the different IP addresses?

Botnet scanning for a vulnerability. Or maybe you've got one of a set of
potential IP addresses a botnet controller could be on, and subverted
machines are trying to phone home.

Annoying more than dangerous. If it really bothers you or there are so
many packets that performance is effected then mail Internode support.

-glen



More information about the Link mailing list