http://threatpost.com/us-cert-warns-of-ntp-amplification-attacks/103573
From: Gary Garrett <[email protected]> Reply-To: WISPA General List <[email protected]> Date: Saturday, January 18, 2014 at 9:43 PM To: WISPA General List <[email protected]> Subject: Re: [WISPA] be on the look out for this > > > They spoofed one of my IP addresses and sent a NTP request to a time server > from the botnet with the destination port as 19, chargen which returns a pile > of random characters thereby amplifying the amount of packets. 4,000 > connections from every IP range you can imagine. > > > > > > On 1/18/2014 7:30 AM, Mike Hammett wrote: > > >> >> Were you the target or the "source"? >> >> >> >> >> ----- >> Mike Hammett >> Intelligent Computing Solutions >> http://www.ics-il.com >> >> >> >> >> >> From: "Gary Garrett" <[email protected]> <mailto:[email protected]> >> To: "WISPA General List" <[email protected]> <mailto:[email protected]> >> Sent: Saturday, January 18, 2014 2:39:21 AM >> Subject: Re: [WISPA] be on the look out for this >> >> >> We got hit by this. Real Bummer. 4,000 connections pounding ports 123 and 19 >> on one IP address. 30 meg sustained and 70 - 80 meg peaks. Took down the >> entire 100 meg fiber due to the massive packets per second. >> It is still ongoing but our upstream had to block it at the edge and is >> still eating the bandwidth. You can not block it yourself so get help right >> away. >> >> Why us? I think a gamer on our network pissed off some hacker in a chat >> room who had access to a botnet. >> You can rent a botnet for $200 a day if you can prove you are not the FBI. >> >> Gary >> >> >> >> >> On 1/17/2014 7:24 AM, Joe Miller wrote: >> >> >>> >>> >>> >>> We had a network outage yesterday afternoon, and thanks to Mike Francis at >>> JMF Solutions the problem went away. So, anyone who needs network helpĀI >>> would strongly recommend Mike Francis at JMF Solutions. >>> >>> >>> >>> Kudos to Mike Francis. >>> >>> >>> >>> http://threatpost.com/us-cert-warns-of-ntp-amplification-attacks/103573 >>> >>> >>> >>> Joe Miller >>> >>> www.dslbyair.com <http://www.dslbyair.com> >>> >>> 228-831-8881 >>> >>> >>> >>> >>> >>> >>> _______________________________________________ >>> Wireless mailing list >>> [email protected]http://lists.wispa.org/mailman/listinfo/wireless >>> >> >> >> _______________________________________________ >> Wireless mailing list >> [email protected] >> http://lists.wispa.org/mailman/listinfo/wireless >> >> >> >> >> >> >> _______________________________________________ >> Wireless mailing list >> [email protected]http://lists.wispa.org/mailman/listinfo/wireless >> > > > _______________________________________________ Wireless mailing list > [email protected] http://lists.wispa.org/mailman/listinfo/wireless
_______________________________________________ Wireless mailing list [email protected] http://lists.wispa.org/mailman/listinfo/wireless
