Re: Lots of incoming traffic on UDP 1026 and UDP 1027?

[Scott Bauer <scottybauer () gmail com>]

Sounds Like a Denial of service attack. Contact your ISP and tell them
that you think you are getting A DDOS attack... Tell them to close
those ports for a day or so.. then you problem should be solved.


On Mon, 27 Dec 2004 12:34:41 -0600, FocusHacks <focushacks () gmail com> wrote:
> I searched the archives at SecurityFocus and couldn't come up with
> anything useful other than someone with Zone Alarm obviously saw the
> same activity and people were trying to tell him to look for listening
> ports on his machine, which is not the case.
>
> I'm getting literally hammered by tons of various IP's on UDP 1026 and UDP 1027
>
> I've attached a CSV log, modified a bit, from my NetScreen 5.  I only
> showed the last 15 bytes of the Source IP:Port so the first octet,
> give or take a few bytes, is cut off.  I left a few columns out as
> well.
>
> Let me know, this has been going on for quite a while, and all my
> searches are ending in vain.  Any ideas?
>
> --
> http://www.FocusHacks.com - The Ford Focus Modification Site!


-- 
IF SOMETHING DOSENT WORK DENY YOU EVER TRIED