Edit: The post was probably heavily AI written and contains mistakes to that effect, which is unfortunate. The data in general is still interesting though.

you are viewing a single comment's thread
view the rest of the comments
[–] 28 points 5 months ago (2 children)

The Belgian traffic? Almost entirely from a single residential IP — one box that sent over 156,000 login attempts, more than the entire country of Germany. It just sat there, hammering echo "\x6F\x6B" over and over, every single second, for weeks. Relentless.

Had a funny similar thing, there's some weird person/people that randomly probe and attack a specific game's community hosted dedicated servers; and one week this specific IP address out of Virginia was just hammering one of mine, with what amounts to a specific byte sequence, then an incrementing number of the packet (until it wrapped around). Then it stopped. Weird shit.

  • source
  • hideshow 2 child comments
  • [–] 4 points 5 months ago (1 child)

    It's possible it was something misconfigured, a poorly-written script, or a bug in some software causing unexpected behavior. At the scale of the Internet, all of those are very possible.

    It could also be the Internet equivalent of a numbers station.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 5 months ago

    It's was a pretty specific non standard port on UDP. It's not even doing proper scanning since the byte sequence used isn't one that would trigger a response challenge/ack. My guess is someone trying to DOS using an older byte sequence that used to choke/kill the server software on older versions.

  • source
  • parent