🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: bc.bcnet
Article #1251

ICMP Flooding, again. (fwd)

#1251
From: Michael Dillon
Date: Fri, 26 Apr 1996 00:00
55 lines
2882 bytes

Since this message was about hacker attacks originating at 
the UNBC in Prince George I though I'd ask if there is some
way to notify sysadmins other than attempts to email postmaster.
I was thinking there might be some sort of local BC security
mailing list...

Michael Dillon                                    Voice: +1-604-546-8022
Memra Software Inc.                                 Fax: +1-604-546-3049
http://www.memra.com                             E-mail: michael@memra.com

---------- Forwarded message ----------
Date: Sat, 27 Apr 1996 00:11:02 -0400
From: "Homer W. Smith" <homer@LIGHTLINK.COM>
Reply-To: Small Internet Access Providers <IAP@VMA.CC.ND.EDU>
To: Multiple recipients of list IAP <IAP@VMA.CC.ND.EDU>
Subject: ICMP Flooding, again. (fwd)

    What can I do about this?

------------------------------------------------------------------------------
Homer Wilson Smith     News, Web, Telnet      Art Matrix - Lightlink
(607) 277-0959         SunOS 4.1.4 Sparc 20   Internet Access, Ithaca NY
homer@lightlink.com    info@lightlink.com     http://www.lightlink.com

---------- Forwarded message ----------
Date: Fri, 26 Apr 1996 23:50:56 -0400
From: Lucas Madar <madar@lightlink.com>
To: homer@lightlink.com
Subject: ICMP Flooding, again.

        Well, it seems I have insulted the intelligence of a hacker who
thinks he was all-elite when the account on nauticom was revoked, and him
and his friends have waged revenge on me. I have no idea what to do. I am
ICMP flooded about 5 times every night, and it's REALLY a pain.
I have written to the sysadmin of the system and recieved no response at
all.. What am I supposed to do after that step? :p

1 IP 142.207.112.20 -> 205.232.34.155 len 572 prot 1
1 IP 142.207.112.20 -> 205.232.34.155 len 572 prot 1
1 IP 142.207.112.20 -> 205.232.34.155 len 572 prot 1
1 IP 142.207.112.20 -> 205.232.34.155 len 572 prot 1
<over 15000 of these omitted>
That's what I got when I enabled IP tracing...

*** Resolved 142.207.112.20 to ugrad.unbc.edu

And I resolved it too, looked it up on internic, and no response after a
week. I'm really getting sick of this. I dont have to go on IRC for it to
start, he just fingers @harmony.lightlink.com for my IP address..
        Well, what should I do? :(
-----
Lucas Madar, madar@lightlink.com, Rotundo on IRC - CService Helper.
http://www.lightlink.com/madar/
Technical Details
Message-ID: <Pine.BSI.3.93.960426225113.19749H-100000@sidhe.memra.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 106393,cb908c5fb23ed6bf,start
X-Google-Attributes: gid106393,public
From: Michael Dillon <michael@memra.com>
Subject: ICMP Flooding, again. (fwd)
Date: 1996/04/26
Message-ID: <Pine.BSI.3.93.960426225113.19749H-100000@sidhe.memra.com>
X-Deja-AN: 151691913
organization: Memra Software Inc. - Internet consulting
content-type: TEXT/PLAIN; charset=US-ASCII
mime-version: 1.0
newsgroups: bc.bcnet