Re: SYN flood atacks?

2004-08-18 Thread Stephen J. Wilcox
we took around a gig of port 80 syn flooding to a customer web host, it was around 12-3pm utc.. ended when the customer disappeared off the net. not sure if this is unusual tho, theres hundreds of such attacks per day globally... Steve On Tue, 17 Aug 2004, [EMAIL PROTECTED] wrote: > Sorry I d

Re: SYN flood atacks?

2004-08-17 Thread Matt Taber
One of my peers had a DOS against one of their colo customers. Effected their/our connection to Level 3. Appx 11:05am EDT ~ Matt Taber [EMAIL PROTECTED] WMIS Internet http://www.wmis.net "Accelerate ... It's a Speed Thing" ~~~

Re: SYN flood attacks? [Virus Checked]

2004-08-17 Thread Brent_OKeeffe
TECTED]         cc:        [EMAIL PROTECTED]         Subject:        Re: SYN flood atacks?  [Virus Checked] On Tue, Aug 17, 2004 at 06:28:55PM +, [EMAIL PROTECTED] wrote: > I have been hearing rumors about some SYN flood atacks on the Internet > today.  Anybody hear anything? Interesting co

Re: SYN flood atacks?

2004-08-17 Thread jgraun
Sorry I didnt take the smart ass factor into account when I posted.  I have heard that AOL and other mega proxies have been sending enough SYN floods (DDoS style) to knock over Discover and Allstate.  I am not talking about small amounts of normal traffic. Jason -- Original message ---

Re: SYN flood atacks?

2004-08-17 Thread Richard A Steenbergen
On Tue, Aug 17, 2004 at 06:28:55PM +, [EMAIL PROTECTED] wrote: > I have been hearing rumors about some SYN flood atacks on the Internet > today. Anybody hear anything? Interesting coincidence, I just heard a rumor about someone receiving spam today. Perhaps the are connected. It might even

Re: SYN flood atacks?

2004-08-17 Thread Sean Donelan
On Tue, 17 Aug 2004 [EMAIL PROTECTED] wrote: > I have been hearing rumors about some SYN flood atacks on the Internet > today. Anybody hear anything? You will need to be more specific. There are syn flood attacks, icmp attacks, udp attacks, tcp attacks, dns attacks, http attacks, im attacks, i

Lock Down (was Re: Syn Flood)

2003-03-25 Thread Mike Lewinski
Ron Harris wrote: I had success on several computers catching IRC Bots with SwatIT, which is free. http://www.lockdowncorp.com/ I would recommend that anyone who considers using Lock Down's software be aware of the content here: http://www.pc-help.org/www.nwinternet.com/pchelp/lockdown/index.html

Re: Syn Flood

2003-03-25 Thread Michael Painter
- Original Message - From: "Christopher Bird" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, March 25, 2003 5:55 PM Subject: Syn Flood > I have a problem on a home PC of all things. Every once in a while it > bursts into life and syn floods an IP address on port 80. The IP > a

Re: Syn Flood

2003-03-25 Thread Jack Bates
Christopher Bird wrote: > I have zone alarm, an SMC Barricade firewall, and Norton anti virus. > Ahhh, but do you have Ad-Aware? -- -Jack

RE: Syn Flood

2003-03-25 Thread Ron Harris
I had success on several computers catching IRC Bots with SwatIT, which is free.   http://www.lockdowncorp.com/   Ron   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Christopher Bird Sent: Tuesday, March 25, 2003 8:56 PM To: [EMAIL PROTECTED]

Re: Syn Flood

2003-03-25 Thread Johannes Ullrich
I would look for something like an IRC bot. Zonealarm may not catch it if it is on there for a while and some user 'permitted' it at some point. Usually, these bots have names to sound like system binaries. Anti virus software may not catch the agent. Do you have any full packet captures from th