We are being attacked.....DOS attack from an OC connection......And my wholenetwork team can't beat this script kiddie.....cant even get his IP address...damn wtf i wrong ith our network analysts? Were getting owned and they won't let the lowley tech support fix this. Gawd... this really aggrivates me. There blocking sub nets. Thousands of ip's at a time.Any help would be greatly appriciated.
February 5th, 2002, 09:20 PM
gold eagle
DrToker it sounds like they are inside your net and not just dosing you - more info would help but if you have lost control -pull the plug on the conex that is linked to them. what does your ids report? :confused:
February 6th, 2002, 01:30 PM
Dr Toker
Damn... heres the story....
One of our network analyst thought it would be a good idea one night to flood a 2600 IRC server. After this, the ppl from 2600 seemed to get a little angry. DUH! So, we got DOSed.
After blocking all their ip's. (Cause it was over 50 ip's we were being attaked from) THey started hitting us upstream. They started attaking our affiliates routers. So they hadto deal with the wrath as well. But it touched me on a personal level, i had to explain to about 50 senior citizens over the phone how our upstream routers arent working, and thats why they couldnt browse the interent.
We never lost control but they were sucking up bandwith like crazy. one of the guys was on or was redirecting through a oc3.Pinging like 5 megs at a time and shyt. Ouch! It was just an attack, not an infiltration. But it effected our customers, and I think thats wha they wanted.
Bastard's!!@*&Y I'll think twice before attacking a server cause now i know how it feels to be on the recieving end.
February 6th, 2002, 01:37 PM
PhirePhreak
But Toker, I'm assuming that your "attacks" on servers are a bit more professional? I hope so...
Sorry all this had to happen to you, and I hope your genius networking people get it figured out okay.
--PhirePhreak
February 6th, 2002, 01:43 PM
Dr Toker
LOL.
You said genius netwrking people,
February 6th, 2002, 01:44 PM
Pooh-Bear
1. post url to webcam on irc server
2. get big whooping spanking plank out
3. give it to the analyst while them people are watching
IMO your getting exactly what you should.. Yez, DOSing a server (well not you personally Toker but the origin of the attack against their server)
February 6th, 2002, 02:44 PM
gold eagle
I'm glad you got it under control. Inform your net analyst dude to forgo further attacks.