Denial of service

[Jacques B.]

On 10/4/07, Jacques B. <jjrboucher at gmail.com> wrote:
> > So I turned off sshd but that didn't stop the problem. I am getting hit
> > several times a second by someone. I would sure like to at least know
> > the IP they are from.
> >
> >         Karl F. Larsen, AKA K5DI
I should have mentioned. One possible cause for lots of noise in your
logs is Peer to Peer.  If you have a dynamic IP then you may have
ended up with an IP that was assigned to little Johnny 2 days ago who
was running file sharing on a P2Pnetwork.  So that IP got populated in
the supernodes (computers that have the list of files shared by a
number of other computers, including their IP).  So you may be getting
a bunch of people running querries on a P2P network and hitting on a
file that was being hosted by little Johnny.  So when they request
that file via their P2P application the network tries to get it from
that IP which is now assigned to your machine.

Of course that noise would be very different than a SSH hack attempt.

If you provide us with the logs (or at least tell us in which logs you
are seeing the activity) it will help others in providing more
accurate advice or opinions.

Jacques B.