Re: Denial of service attack on port 6667

From: John Marquart (jomarquaat_private)
Date: Thu Jul 12 2001 - 11:38:33 PDT

Next message: MrG: "SMTP server (How can I find out the real source of an attack)"

Previous message: adam: "Re: Recent IRC attacks"
In reply to: vlimaat_private: "Denial of service attack on port 6667"
Next in thread: jerat_private: "Re: Denial of service attack on port 6667"
Reply: jerat_private: "Re: Denial of service attack on port 6667"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I am surprised not to have seen more traffic about this.  apparently
yesterday and today EFnet has been nearly completely DoS'd from the
network - causing many of their main servers to de-link.   I do not know
many details  - I know that they are working w/ the law/other ISPs to try
to solve the problem (Have been contacted about traffic which turned out
to be an eggdrop bot).

If anyone know more  - I know that the EFnet support staff would love to
know more concretely where the attacks are coming from / help w/
resolution.

If you are not linked into efnet - I am not sure why you would be
experiencing these attacks - unless someone out thre has a bone w/ all IRC
nets.  If you are a source - yikes!  

-john



----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com

Next message: MrG: "SMTP server (How can I find out the real source of an attack)"
Previous message: adam: "Re: Recent IRC attacks"
In reply to: vlimaat_private: "Denial of service attack on port 6667"
Next in thread: jerat_private: "Re: Denial of service attack on port 6667"
Reply: jerat_private: "Re: Denial of service attack on port 6667"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jul 12 2001 - 13:52:56 PDT