From owner-freebsd-isp  Tue Oct 15  9:17:19 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F0C3B37B401
	for <freebsd-isp@FreeBSD.ORG>; Tue, 15 Oct 2002 09:17:17 -0700 (PDT)
Received: from mail.day-light.net (day-light.net [64.37.72.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3EED743EB1
	for <freebsd-isp@FreeBSD.ORG>; Tue, 15 Oct 2002 09:17:17 -0700 (PDT)
	(envelope-from john@day-light.com)
Received: from w1 (118-203.bestdsl.net [216.162.118.203])
	by mail.day-light.net (Postfix) with SMTP
	id 178C03520C; Tue, 15 Oct 2002 10:45:18 -0500 (CDT)
Reply-To: <john@day-light.com>
From: "John Brooks" <john@day-light.com>
To: "'Arkadi Kosmynin'" <ank@ozinsight.com>,
	<freebsd-isp@FreeBSD.ORG>
Subject: RE: An attack? Does it happen to anybody else?
Date: Tue, 15 Oct 2002 10:45:41 -0500
Message-ID: <001801c27461$eafe9dc0$c905010a@daylight.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <000f01c27434$903aa8c0$0200a8c0@anna>
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
Importance: Normal
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Maybe there are multiple users NAT'ed behind those IP's.

--
John Brooks
john@stlbsd.org
 

> -----Original Message-----
> From: owner-freebsd-isp@FreeBSD.ORG
> [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Arkadi Kosmynin
> Sent: Tuesday, October 15, 2002 5:21 AM
> To: freebsd-isp@FreeBSD.ORG
> Subject: An attack? Does it happen to anybody else?
> 
> 
> Hi,
> 
> 
> There were 3 incidents of high volume downloading from our 
> site during the
> past week. I can't understand what is going on and would 
> appreciate any info
> on the issue.
> 
> I checked our logs:
> 
> Folks from 195.210.137.130 downloaded ~140MB of the same file.
> Folks from 212.160.201.118 ~ 350MB.
> Folks from 213.17.138.154 ~ 590MB.
> 
> This hurts us. What can I do about it?
> 
> 
> Thanks,
> 
> Arkadi.
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message