Re: Denial of service attack on port 6667

From: jerat_private
Date: Thu Jul 12 2001 - 21:15:51 PDT

Next message: Mike Batchelor: "RE: SMTP server (How can I find out the real source of an attack)"

Previous message: James Edwards: "SANS Org Website"
In reply to: John Marquart: "Re: Denial of service attack on port 6667"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

i de-linked two servers the other day... one from chatnet... was severyly
ddosd.  Actaully was last week...

Jeremy

----- Original Message -----
From: "John Marquart" <jomarquaat_private>
To: <incidentsat_private>
Sent: Thursday, July 12, 2001 11:38 AM
Subject: Re: Denial of service attack on port 6667


> I am surprised not to have seen more traffic about this.  apparently
> yesterday and today EFnet has been nearly completely DoS'd from the
> network - causing many of their main servers to de-link.   I do not know
> many details  - I know that they are working w/ the law/other ISPs to try
> to solve the problem (Have been contacted about traffic which turned out
> to be an eggdrop bot).
>
> If anyone know more  - I know that the EFnet support staff would love to
> know more concretely where the attacks are coming from / help w/
> resolution.
>
> If you are not linked into efnet - I am not sure why you would be
> experiencing these attacks - unless someone out thre has a bone w/ all IRC
> nets.  If you are a source - yikes!
>
> -john
>
>
>
> --------------------------------------------------------------------------
--
>
>
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management
> and tracking system please see:
>
> http://aris.securityfocus.com
>



----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com

Next message: Mike Batchelor: "RE: SMTP server (How can I find out the real source of an attack)"
Previous message: James Edwards: "SANS Org Website"
In reply to: John Marquart: "Re: Denial of service attack on port 6667"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Jul 13 2001 - 16:40:23 PDT