full-disclosure - Re: lots of connections to 64.40.117.19 port 80

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 18 Apr 2008 11:21:09 -0500
From: offbitz <offbitz@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: lots of connections to 64.40.117.19 port 80

I didn't see any claims being made, just a question, albeit maybe
rhetorical.

Either way, who gives a shit.  Back to the OP-

*Recently I have seen a lots of connections to 64.40.117.19 port 80 in
one of our clients network.
Connections are coming from all over the Internet (various different
IPs) specifically to this IP.*

      I'm not sure if I'm misunderstanding this, or if the grammar is just
unpleasant. It's always nice to make sure before I show my ass.

     I would assume the first sentence means you are seeing outgoing
connections, from your client's site, destined for the IP/port above.  So
then, the second sentence makes even less sense, connections coming into
your network from all over the Internet, but 'specifically to this IP'?
Huh?  Maybe I just need more coffee, but please explain this one for me.

On Fri, Apr 18, 2008 at 10:48 AM, Joey Mengele <joey.mengele@...hmail.com>
wrote:

> http://en.wikipedia.org/wiki/Ad_hominem
>
> Unless you have some evidence such as the evidence Dr. Neal Krawetz
> was able to provide re: GOBBLES and n3td3v, this claim is
> irresponsible and I urge the other members of the list to ignore it.
>
> J
>
> On Fri, 18 Apr 2008 11:38:44 -0400 news@...donald.net wrote:
> >lol. Are you related to n3td3v?
> >
> >>
> >>
> >> On Fri, 18 Apr 2008 11:30:19 -0400 news@...donald.net wrote:
> >>>
> >>>Sorry to answer for Valdis, but here...
> >>>
> >>>https://dmcdonald.net/iframe.html if I were a *VERY* popular
> >site,
> >>>that
> >>>would ddos google. Although including somekind of search request
> >>>would
> >>>make it a little better, and realisticly id go down well before
> >>>google.
> >>
> >> I find it interesting you were able to develop a tool to DDoS
> >> Google so quickly. Is there something going on with you I need
> >to
> >> know about? Last time I checked, this was full-disclosure not
> >black-
> >> hat.
> >>
> >>>
> >>>But it's not exactly rocket science, is it? Although you may
> >have
> >>>been
> >>>confused by the term "iframe injection".
> >>>
> >>
> >> Is it *rocket* science? Or is it *computer* science? What I
> >propose
> >> is that it is neither. In fact, what I propose is that it is
> >*black-
> >> hat* science. I still respectfully disagree with your analysis
> >> though. Perhaps more evidence on how you have successfully
> >DDoS'd
> >> Google in the past?
> >>
> >>>Best,
> >>>
> >>>Darren
> >>
> >> Same,
> >>
> >> J
> >>
> >> --
> >> Take a break - you deserve it.  Click here to find a great
> >vacation.
> >>
> >http://tagline.hushmail.com/fc/Ioyw6h4eO7OQLKog65wrqqMcnKoSisQi0fGB
> >6FdexfXT6BJaweROFG/
> >>
> >>
>
> --
> Click to create your dream New Zealand vacation now.
>
> http://tagline.hushmail.com/fc/Ioyw6h4dwon8xb8VEzU6pUnTbckDVIyckWUxRcFxAxZVhI78VbrEfO/
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/