Security Incidents mailing list archives

Re: very weird traffic


From: May-Consult <florian.gottschling () may-consult net>
Date: Fri, 2 Apr 2004 10:50:07 +0200

Hi,

out of curiosity I tried a little search myself:

"eyes wired shut" brought considerable less results, about 690.
after I tried leaving out all music related stuff with the search
terms:
"eyes wired shut" -edgewater -lyric -story +winmx

there are only about 7 results left.
Those are mostly regarding this topic on securityfocus (and the two
crossposts at gmane and neohapsis), but one of them is a posting at
slyck-website, being host to many a discussion regarding p2p-networks:
http://www.slyck.com/forums/viewtopic.php?t=4032

It mainly deals with frontcode-related stuff, but since the problem is
noted there, maybe there will be updates which can shed light to this
incident.

Some might suggest its a kind of RIAA activity trying to flood the
network rendering it useless for filesharing, but that is a wild
guess.

Kind regards,
florian gottschling



----

If I search for "eyes wired shut" I will get up to 15,000 hits
for this one title (madonna got 1597 hits this AM: britney spears
got 4971: eyes wired shut got 11,458 hits) This file name is the
most dramatic but there are similar results with other searches
based on what they are reporting in their shared folder. 
There are about 30 names but the hash at the end of the name
will be different, ie: user123_45678; user234_56897; user489_78546;
user789_78956 etc. For example first 5 nicknames generated 100+
nicknames with different hashes only and over 1,000 files listed. 
Also the reported connection to winmx is different from hash to
hash - could be anything from 13.3K to T3. As well as number of
open slots will differ from name to name (136 of 136 available etc)



---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost of
ownership.

Download your free trial at 
http://www.securityfocus.com/sponsor/Astaro_incidents_040301
----------------------------------------------------------------------------


Current thread: