Discuss mailing list

[Psilo <dns AT psilo.org>]

After seeing my T2 unstable and with many timeouts, I have decided to give a try to Jeff's Perl script for DDOS protection, just to know if my server was abused.

Here is the result after just 2 minutes of activity:

> 16:58:25 [0] portBlocking 195.56.100.41:80 - 10 hits
> 16:58:33 [0] portBlocking 46.22.129.33:80 - 10 hits
> 16:58:41 [0] portBlocking 199.27.134.59:80 - 10 hits
> 16:58:43 Unblocking 195.56.100.41:80 after 18 seconds
> 16:58:51 Unblocking 46.22.129.33:80 after 18 seconds
> 16:59:01 Unblocking 199.27.134.59:80 after 20 seconds
> 16:59:07 [0] portBlocking 83.134.34.231:1024 - 15 hits
> 16:59:19 [1] portBlocking 195.56.100.41:80 - 11 hits
> 16:59:28 [1] portBlocking 46.22.129.33:80 - 11 hits
> 16:59:30 [1] portBlocking 199.27.134.59:80 - 10 hits
> 16:59:36 Unblocking 83.134.34.231:1024 after 29 seconds
> 16:59:41 [1] portBlocking 83.134.34.231:1024 - 15 hits
> 16:59:59 Unblocking 195.56.100.41:80 after 40 seconds
> 17:00:07 Unblocking 199.27.134.59:80 after 37 seconds
> 17:00:07 Unblocking 46.22.129.33:80 after 39 seconds
> 17:00:16 [2] portBlocking 195.56.100.41:80 - 10 hits
> 17:00:34 Unblocking 83.134.34.231:1024 after 53 seconds
> 17:00:49 [2] portBlocking 46.22.129.33:80 - 14 hits
> 17:01:11 [2] portBlocking 199.27.134.59:80 - 10 hits
> 17:01:27 Unblocking 195.56.100.41:80 after 71 seconds
> 17:02:10 [3] portBlocking 195.56.100.41:80 - 11 hits
> 17:02:23 Unblocking 199.27.134.59:80 after 72 seconds
> 17:02:29 Unblocking 46.22.129.33:80 after 100 seconds

Impressive. I really needed that, thank you Jeff :)

Reminder: the script can be downloaded from http://wiki.opennic.glue/ddosDotPl