Sub7/Open Telnet/Open Socks/DOS

[Ryan Yagatich <ryagatich () CSN1 COM>]

Last Night At approximately 10:00PM EST - 12:00AM EST IRC servers had been
hit by massive flooding from any user that had ever connected to the
network. These are the following patterns:

Any user with an open:
        telnet
        socks
        sub7 server

if your connection last night had received 3 scans (10:00, 11:00, 12:00 and
possibly later) please check the logs to see where they are orignitating
from.

if the user on IRC did not have any of those services labled erlier, the
user's IP had been ping-flooded to DOS their box.



ryan