user3121103 – WindowsTechs.com

UDP flood 300 Kbps + SYN probes / other attacks. Flood or DDoS at low rate?

Posted on August 31, 2017 by user3121103

So for over 2 weeks, Im receiving what appears a combination of attacks non-stop 24/7.

First this UDP flood at a strangely small rate of 280 Kbps / 110 pps (360 bytes length)

02:29:41.978484 IP (tos 0x0, ttl 48, id 56020, offset 0, flags… Continue reading UDP flood 300 Kbps + SYN probes / other attacks. Flood or DDoS at low rate?→

Iptables DROPS SSH after port knock rules, but nmap shows it as OPEN

Posted on August 27, 2017 by user3121103

I setup port knocking rules on CentOS 7, iptables as follow:

-I INPUT -p tcp –dport 1 -m recent –set –rsource –name KNOCK1 -m limit –limit 5/min -j LOG –log-prefix “knock 1” –log-level 7
-I INPUT -p tcp –dport 2 -m r… Continue reading Iptables DROPS SSH after port knock rules, but nmap shows it as OPEN→