Let's talk with Code Monkey-san
>>811>>782
Thank you for your detailed report, but I have some questions.
You removed P2 and find.2ch from the white-list after 2014/03/05 22:28.
But they look to be removed before 2014/03/05 00:20,
according to these bbon logs:
http://bbon.geo.jp/IP=210.135.100.130
http://bbon.geo.jp/HOST=razil
>>782 shows connections from P2 and find.2ch to maguro.
But BBON has not catched them in maguro, according to the bbon logs.
>>869>>871 has a similar question.
> and was not informed of the attack until 22:28
What did you see to notice the attack at first?
As >>801 says, Brazil is crawling for find.2ch.
Why did you think it was not the noraml crawling but the abnormal attack.
Or do you think the crawling itself is also the attack?
>>789>>830
If it is SYN flood attack, can BBON stop it?
>>820>>855>>883>>812
I wish Jim-san could have a good connection with Brazil (or Hiroyuki?)
to find a win-win solution to cooperate.
Thank you for your detailed report, but I have some questions.
You removed P2 and find.2ch from the white-list after 2014/03/05 22:28.
But they look to be removed before 2014/03/05 00:20,
according to these bbon logs:
http://bbon.geo.jp/IP=210.135.100.130
http://bbon.geo.jp/HOST=razil
>>782 shows connections from P2 and find.2ch to maguro.
But BBON has not catched them in maguro, according to the bbon logs.
>>869>>871 has a similar question.
> and was not informed of the attack until 22:28
What did you see to notice the attack at first?
As >>801 says, Brazil is crawling for find.2ch.
Why did you think it was not the noraml crawling but the abnormal attack.
Or do you think the crawling itself is also the attack?
>>789>>830
If it is SYN flood attack, can BBON stop it?
>>820>>855>>883>>812
I wish Jim-san could have a good connection with Brazil (or Hiroyuki?)
to find a win-win solution to cooperate.
|
|
|