They spoofed one of my IP addresses and sent a NTP request to a time
server from the botnet with the destination port as 19, chargen which
returns a pile of random characters thereby amplifying the amount of
packets. 4,000 connections from every IP range you can imagine.
On 1/18/2014 7:30 AM, Mike Hammett wrote:
Were you the target or the "source"?
-----
Mike Hammett
Intelligent Computing Solutions
http://www.ics-il.com
------------------------------------------------------------------------
*From: *"Gary Garrett" <[email protected]>
*To: *"WISPA General List" <[email protected]>
*Sent: *Saturday, January 18, 2014 2:39:21 AM
*Subject: *Re: [WISPA] be on the look out for this
We got hit by this. Real Bummer. 4,000 connections pounding ports 123
and 19 on one IP address. 30 meg sustained and 70 - 80 meg peaks.
Took down the entire 100 meg fiber due to the massive packets per second.
It is still ongoing but our upstream had to block it at the edge and
is still eating the bandwidth. You can not block it yourself so get
help right away.
Why us? I think a gamer on our network pissed off some hacker in a
chat room who had access to a botnet.
You can rent a botnet for $200 a day if you can prove you are not the FBI.
Gary
On 1/17/2014 7:24 AM, Joe Miller wrote:
We had a network outage yesterday afternoon, and thanks to Mike
Francis at JMF Solutions the problem went away. So, anyone who
needs network help...I would strongly recommend Mike Francis at
JMF Solutions.
Kudos to Mike Francis.
http://threatpost.com/us-cert-warns-of-ntp-amplification-attacks/103573
Joe Miller
www.dslbyair.com
228-831-8881
_______________________________________________
Wireless mailing list
[email protected]
http://lists.wispa.org/mailman/listinfo/wireless
_______________________________________________
Wireless mailing list
[email protected]
http://lists.wispa.org/mailman/listinfo/wireless
_______________________________________________
Wireless mailing list
[email protected]
http://lists.wispa.org/mailman/listinfo/wireless
_______________________________________________
Wireless mailing list
[email protected]
http://lists.wispa.org/mailman/listinfo/wireless
