Full Disclosure mailing list archives

Re: Lycos Europe organizing a DDoS attack against spammers


From: Andrew Smith <stfunub () gmail com>
Date: Wed, 1 Dec 2004 19:33:14 +0000

A get to http://makelovenotspam.com/intl/static/ is what the screen
saver does initially.
I can not see this lasting long;
1) Whatever they say, they're breaking the law
2) They're DDoSing spammers, the people with millions of bots /
gigabits of bandwidth under their control.. we can see now that the
spammers have alread retaliated. I haven't been able to access
makelovenotspam.com for days.



On Wed, 1 Dec 2004 12:47:05 -0600, Kevin <kkadow () gmail com> wrote:
On Tue, 30 Nov 2004 13:38:31 +0100 (CET), Feher Tamas
<etomcat () freemail hu> wrote:
Lycos Europe organizing a DDoS attack against spammers

Lycos Europe has started organizing a distributed
denial-of-service attack against web sites run by spammers.

Lycos, via its makelovenotspam.com website,
is offering a free screensaver for download.
The screensavers make constant http requests to spam websites.

Can anybody provide pointers on how to detect this traffic
by reviewing squid proxy logs?

I'd guess that at least a few of our (thousands of) users will install
"makelovenotspam", but lacking the authority to lock down
or examine desktops, I'm limited to reviewing access logs after the
fact to track down offenders.

Thanks,

Kevin Kadow



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html



-- 
zxy_rbt2

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: