Security Incidents mailing list archives

Re: Denial of service attack on port 6667


From: <jer () privacy nu>
Date: Thu, 12 Jul 2001 21:15:51 -0700

i de-linked two servers the other day... one from chatnet... was severyly
ddosd.  Actaully was last week...

Jeremy

----- Original Message -----
From: "John Marquart" <jomarqua () indiana edu>
To: <incidents () securityfocus com>
Sent: Thursday, July 12, 2001 11:38 AM
Subject: Re: Denial of service attack on port 6667


I am surprised not to have seen more traffic about this.  apparently
yesterday and today EFnet has been nearly completely DoS'd from the
network - causing many of their main servers to de-link.   I do not know
many details  - I know that they are working w/ the law/other ISPs to try
to solve the problem (Have been contacted about traffic which turned out
to be an eggdrop bot).

If anyone know more  - I know that the EFnet support staff would love to
know more concretely where the attacks are coming from / help w/
resolution.

If you are not linked into efnet - I am not sure why you would be
experiencing these attacks - unless someone out thre has a bone w/ all IRC
nets.  If you are a source - yikes!

-john



--------------------------------------------------------------------------
--


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see:

http://aris.securityfocus.com




----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com


Current thread: