SGI.COM hosts are being abused by ircwar kiddies/scriptkids on the IRCNET network (ircnet.demon.co.uk, irc.stealth.net, irc1.us.ircnet.net and other servers) These kiddies are taking irc channels, compromising furthur servers and launching ddos attacks, and appear also to have compromised the SGI email services, since abuse reports were met with silence. Today they launched a spoofed ddos attack from ip`s with a /whois report follows: ÚÄÄÄÄÄ---Ä--ÄÄ-ÄÄÄÄÄÄ---Ä--ÄÄ-ÄÄÄÄÄÄÄÄÄ--- -- - | Geert (~geertat_private) (Internic Commercial) ³ ircname : The.Judge | channels : @#tropical #DaJudge @#bnc @#Bitches @#irclords ³ server : irc-2.stealth.net (Stealth Communications, New York City) : idle : 8 hours 32 mins 58 secs (signon: Thu Jan 1 01:00:00 1970) ÚÄÄÄÄÄ---Ä--ÄÄ-ÄÄÄÄÄÄ---Ä--ÄÄ-ÄÄÄÄÄÄÄÄÄ--- -- - | DaJudge (~Judge@yog-sothoth.sgi.com) (Internic Commercial) ³ ircname : The.Judge | channels : #singletown #DaJudge @#tropical @#bnc @#Bitches @#irclords ³ server : irc-2.stealth.net (Stealth Communications, New York City) : idle : 7 hours 53 mins 12 secs (signon: Thu Jan 1 01:00:00 1970) Feel free to connect to ircnet and verify this for yourself.. #irclords is a known kiddie channel, frequented by kiddies who think they are the "lords" of irc Also #bnc is a channel used for the trading of "psybnc" accounts on compromised servers. _________________________________________________________________ The new MSN 8: smart spam protection and 2 months FREE* http://join.msn.com/?page=features/junkmail ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Mon Jan 20 2003 - 17:50:18 PST