Subject: Apparently Hackers are Rampent   
   @VIA: DARKSANC   
   @MSGID: <4C38C744.1235.dove-int@darksanctuary.servebbs.com>   
   @REPLY: <4C36EE5A.144.dove-int@roachguts.com>   
   @TZ: c0f0   
     Re: Apparently Hackers are Rampent   
     By: John Guillory to Mit on Fri Jul 09 2010 03:39 pm   
      
    > He's not running code on my server.  The other machine's more than likely   
    > infected or trying to infect mine with a glitch that only affects Microso   
    > IIS.  I don't run IIS, I run Synchronet's web server only.  But his machi   
    > effectively was doing the equivilent of pointing your web browser to a   
    > non-existing path and pressing F5 (refresh) like 1000 times a second. The   
    > URL was actually trying to be fetched so much that it couldn't display it   
    > fast enough in the listbox!  It was the same URL over and over.  He didn'   
    > infect me with nothing, but the repeated attempts caused it to bog my   
    > computer down to a crawl.  I wished Synchronet had a thing to temporarly   
    > ban the IP address after repeated non-existing URL's like the attempted   
    > password hacking attempts.... If it did, the machine would auto-speed   
    > up till the hacker or infected website gave up....   
      
   I believe we call that a D.O.S. attack. Usually done with syn flooding but    
   this seems to work also :)   
      
   It would be nice for some type of throttling on the synch services. Some    
   polite notification telling the user to "chill out for a sec" if it's    
   requesting to much in a givin amount of time.   
      
      
   ---   
    þ Synchronet þ Dark Sanctuary darksanctuary.servebbs.com   
    * Origin: Time Warp of the Future BBS - Home of League 10 (1:340/400)