Results 1 to 6 of 6

Thread: AO for a DoS attack?

  1. April 18th, 2004, 08:49 PM #1
    grim_reaper1
    grim_reaper1 is offline
    Banned
    Join Date
    Apr 2004
    Posts
    23
    Wonder if anyone else noticed, someone tried to use AO for a DoS attack at 2:51pm today.
    Reply With Quote Reply With Quote
  2. April 18th, 2004, 08:53 PM #2
    MrLinus
    MrLinus is offline
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323
    Wonder if anyone else noticed, someone tried to use AO for a DoS attack at 2:51pm today.
    Uh... proof or logs to validate this?

    Moved to a seperate thread in Misc Security.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage
    Reply With Quote Reply With Quote
  3. April 18th, 2004, 09:02 PM #3
    grim_reaper1
    grim_reaper1 is offline
    Banned
    Join Date
    Apr 2004
    Posts
    23
    Yes, I do have the logs, I can forward them to you also, they have already been sent to Qwest. Just tell me where to send it.
    Reply With Quote Reply With Quote
  4. April 18th, 2004, 09:30 PM #4
    MrLinus
    MrLinus is offline
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323
    Just so for the information of others...

    1) I have sent this to the appropriate admins here at Jupitermedia, our parent company to deal with.

    2) After review the logs (or rather log as it seems to be a single culmulative log -- general OS IDSes tend not to be too descriptive) it is apparent that this is likely Slammer activity and.. it's quite likely not AO itself. Jupitermedia has a large block of IPs. After tracerouting both the IP you gave me and http://www.antionline.com itself, I noticed that the IPs were in vastly different subnets.

    This however doesn't mean that someone didn't pull a "stupid" and double click on something. As I get more details that I can release I will let you know.

    And in the future, if you or others have experienced suspected DoS or other "attacks" by AO, please do not hesitate to contact me first or any other moderator. We'd be more than glad to help to resolve the issue.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage
    Reply With Quote Reply With Quote
  5. April 18th, 2004, 09:42 PM #5
    grim_reaper1
    grim_reaper1 is offline
    Banned
    Join Date
    Apr 2004
    Posts
    23
    Just trying to help where I can.
    Reply With Quote Reply With Quote
  6. April 18th, 2004, 10:15 PM #6
    Cybr1d
    Cybr1d is offline
    HeadShot Master N1nja Cybr1d's Avatar
    Join Date
    Jul 2003
    Location
    Boston, MA
    Posts
    1,840
    I noticed it too...lol it happened right in front of me. One second everything is running smoothly...then the next, everything started going extreeeeeeemely slow.

    Thnx Grim. Would it be possible for me to get a copy of those logs? I'm getting into Computer FOrensics, and I'd like to see cases whenever I can.

    Cheers,
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules