[Dshield] eBay Billing Update

Adam Leach dshield at ask-adders.com
Wed Aug 6 22:32:53 GMT 2003


Hi,

I went to the site to enter rubbish into their page a few times to cause
them so rubbish information.

After a few hours they decided to start sending loads of requests to my
proxy/web server.  

They all came from sg01.uk.verideon.net the following is the apache log
and the linux firewall log

sg01.uk.verideon.net - - [06/Aug/2003:15:22:58 +0100] "GET / HTTP/1.0"
200 30470

Aug  5 17:35:15 dev kernel: SuSE-FW-ACCEPT IN=eth0 OUT=
MAC=00:01:02:15:4f:e5:00:09:b6:6b:84:8c:08:00 SRC=80.69.8.133
DST=<MY_IP_ADDRESS> LEN=60 TOS=0x08 PREC=0x00 TTL=52 ID=23329 D
F PROTO=TCP SPT=47381 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0 OPT
(020405B40402080A11152BD10000000001030300)

Probably not much use now it was a few hours ago since it stopped and
they have probably moved on to another machine.  

At least somebody has closed the site http://www.ebayupdate.net/

Sometimes it can be amusing to annoy someone.

Regards

Adam





More information about the list mailing list