I need to know what is a "syn port" attack and why would some IP

[acmavm]

administrator in Bombay, India keep attacking my computer. Can anyone tell me what is going on?

[amish_enforcer]

1. Usually DOS attack

as in Denial of Service, but can have other uses

[amish_enforcer]

2. Is this a server or desktop box? n/t

[Ellen Forradalom]

3. Do you mean SYN flooding?

It is a denial-of-service attack in which attacking computer initiates thousands of connections without finishing the 'handshake', thereby sending the victim computer into a tizzy.

SYN refers to the 'synchronize' bit of a packet of data, which initiates a connection between two computers.

[htuttle]

4. 'SYN' is a flag that TCP packets carry when they try to connect

IIRC, the first packet in a connection carries a 'SYN' flag.

'SYN floods' are commonly used to determine what ports are open on your machine.

Do you have a firewall on your machine? Somebody is knocking at your door(s)...

NOTE: this doesn't mean you've been singled out -- lots of hackers just scan all the IPs in a range to find out what's there.

[amish_enforcer]

5. you remember correctly

SYN then ACK (acknowledge)

but I'm a simple Amish man who knows not of these things ;)

[htuttle]

6. Never met an Amish hacker before...

...first time for everything...:)

[amish_enforcer]

10. yes, our equiptment is not that "mainstream"

http://club.cdfreaks.com/showthread/t-49725.html

but it does the job

[Ellen Forradalom]

7. The TCP handshake goes like this

First packet (from initiator): SYN bit set
Reply packet(response): SYN and ACK bits set
Third packet (from initiator): ACK bit set

then TCP connection is open

[Ellen Forradalom]

8. Aretha sang about that didn't she?

R-E-S-P-E-C-T
Find out what it means to me
R-E-S-P-E-C-T
Open up a TCP
Socket to me
Socket to me
Socket to me
Socket to me
Just a little bit....

[judge_smales]

13. Oh God....

And I thought I worked w/ geeks!

R-E-S-P-E-C-T
Find out what it means to me
R-E-S-P-E-C-T
Open up a TCP
Socket to me
Socket to me
Socket to me
Socket to me
Just a little bit....

[Wonk]

9. For a detailed technical explanation click here

http://www.cert.org/advisories/CA-1996-21.html

[acmavm]

11. I have a desk top computer and for three days this guy has been

messing with it. I have McAffee on my computer and I can backtrack to who is doing this. I can even get the phone number. Here's some of the info:
[e-mail]
IP Adminsitrator, 10th Floor, 2MG Road, Fort Mumhai, India
Phone: [phone]
Guys name (supposedly) is GP Singh

Every time he does this it just screws up my browser.

[amish_enforcer]

12. maybe he doesn't even know its going on (?)

fire him an email maybe from a anon web mail acct