soledad penadés
repeat 4[fd 100 rt 90]

5170 intrussions

It's incredible. I have just set up a w2k box, plus a firewall to stop stupid people with their infected computers to annoy me. In just few hours I have had more than 5000 tries to connect my computer through well known ports like 445, 5000, etc.
Looking at the firewall log, it can be clearly seen that almost all the intrussion attempts come from this very subnetwork (eresmas… aka wanadoo… aka uni2), thus generating a great amount of unuseful network traffic. Maybe the ISP's should block or filter somehow this kind of packets.
Well, I know it could imply an attack against each client privacy - I never allowed my isp to read the packets my computer sends. But in any case, and as far as I can remember from my studies… it is possible for a tcp implementation to know to which port is destinated a packet, without reading the packet contents (that is what should considered as a privacy intrussion), and then filter it - that's how firewalls work, roughly… So maybe it could be possible to build an ISP software filter that detects when a user/computer throws packets addressed to the same port to entire ip ranges and then block subsequent accesses once reached a given number or something like that.
Maybe the spanish information techonologies lawyers should focus their efforts into this kind of crime and not the peer to peer (p2p) and other type of themes which are much more sensationalist and spectacular. But that do not hurt as they told us.

// One response to 5170 intrussions

sole
sole
20050117

update: 8267 intrussion attempts by the moment :O

You came late to the party

Comments are closed, but if you want to comment anything about this entry please let me know using the info in this page.