Re: [botnets] DDoS we've seen last weekend

2008-01-13 Thread John Draper
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] -- Mark Armitage wrote: Hi John, I'm curious, do you know if we these real IP's 'owned machines' or spoofed source IP's ? Real Connections or just SYN's other flooded frames ? Mark Armitage. There is a very high

Re: [botnets] DDoS we've seen last weekend

2008-01-07 Thread John Draper
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] -- Konstantin Barinov wrote: To report a botnet PRIVATELY please email: [EMAIL PROTECTED] -- Hello! FYI. One of our customers with .ro

Re: [botnets] DDoS we've seen last weekend

2008-01-06 Thread Richard Rogerson
, 2008 5:34 PM To: botnets@whitestar.linuxbox.org Subject: [botnets] DDoS we've seen last weekend Hello! FYI. One of our customers with .ro site was under DDoS this weekend. Attack was incoming from more tham 3.5M unique IP addresses, all from different C classes. -- -- Konstantin Barinov

Re: [botnets] DDoS we've seen last weekend

2008-01-06 Thread Richard Rogerson
:[EMAIL PROTECTED] Sent: Sunday, January 06, 2008 11:15 PM To: Richard Rogerson Cc: botnets@whitestar.linuxbox.org Subject: Re: [botnets] DDoS we've seen last weekend Perhaps those were spoofed addresses, I agree. It was about 120K pps. -- Konstantin On Jan 7, 2008 1:32 AM, Richard Rogerson

Re: [botnets] DDoS we've seen last weekend

2008-01-06 Thread Konstantin Barinov
[mailto:[EMAIL PROTECTED] *Sent:* Sunday, January 06, 2008 11:15 PM *To:* Richard Rogerson *Cc:* botnets@whitestar.linuxbox.org *Subject:* Re: [botnets] DDoS we've seen last weekend Perhaps those were spoofed addresses, I agree. It was about 120K pps. -- Konstantin On Jan 7, 2008 1:32