We are being attacked.....DOS attack from an OC connection......And my wholenetwork team can't beat this script kiddie.....cant even get his IP address...damn wtf i wrong ith our network analysts? Were getting owned and they won't let the lowley tech support fix this. Gawd... this really aggrivates me. There blocking sub nets. Thousands of ip's at a time.Any help would be greatly appriciated.
DrToker it sounds like they are inside your net and not just dosing you - more info would help but if you have lost control -pull the plug on the conex that is linked to them. what does your ids report? :confused:
Damn... heres the story....
One of our network analyst thought it would be a good idea one night to flood a 2600 IRC server. After this, the ppl from 2600 seemed to get a little angry. DUH! So, we got DOSed.
After blocking all their ip's. (Cause it was over 50 ip's we were being attaked from) THey started hitting us upstream. They started attaking our affiliates routers. So they hadto deal with the wrath as well. But it touched me on a personal level, i had to explain to about 50 senior citizens over the phone how our upstream routers arent working, and thats why they couldnt browse the interent.
We never lost control but they were sucking up bandwith like crazy. one of the guys was on or was redirecting through a oc3.Pinging like 5 megs at a time and shyt. Ouch! It was just an attack, not an infiltration. But it effected our customers, and I think thats wha they wanted.
Bastard's!!@*&Y I'll think twice before attacking a server cause now i know how it feels to be on the recieving end.
But Toker, I'm assuming that your "attacks" on servers are a bit more professional? I hope so...
Sorry all this had to happen to you, and I hope your genius networking people get it figured out okay.
You said genius netwrking people,
1. post url to webcam on irc server
2. get big whooping spanking plank out
3. give it to the analyst while them people are watching
IMO your getting exactly what you should.. Yez, DOSing a server (well not you personally Toker but the origin of the attack against their server)
I'm glad you got it under control. Inform your net analyst dude to forgo further attacks.