Article View: bc.bcnet
Article #1251ICMP Flooding, again. (fwd)
From: Michael Dillon
Date: Fri, 26 Apr 1996 00:00
Date: Fri, 26 Apr 1996 00:00
55 lines
2882 bytes
2882 bytes
Since this message was about hacker attacks originating at
the UNBC in Prince George I though I'd ask if there is some
way to notify sysadmins other than attempts to email postmaster.
I was thinking there might be some sort of local BC security
mailing list...
Michael Dillon Voice: +1-604-546-8022
Memra Software Inc. Fax: +1-604-546-3049
http://www.memra.com E-mail: michael@memra.com
---------- Forwarded message ----------
Date: Sat, 27 Apr 1996 00:11:02 -0400
From: "Homer W. Smith" <homer@LIGHTLINK.COM>
Reply-To: Small Internet Access Providers <IAP@VMA.CC.ND.EDU>
To: Multiple recipients of list IAP <IAP@VMA.CC.ND.EDU>
Subject: ICMP Flooding, again. (fwd)
What can I do about this?
------------------------------------------------------------------------------
Homer Wilson Smith News, Web, Telnet Art Matrix - Lightlink
(607) 277-0959 SunOS 4.1.4 Sparc 20 Internet Access, Ithaca NY
homer@lightlink.com info@lightlink.com http://www.lightlink.com
---------- Forwarded message ----------
Date: Fri, 26 Apr 1996 23:50:56 -0400
From: Lucas Madar <madar@lightlink.com>
To: homer@lightlink.com
Subject: ICMP Flooding, again.
Well, it seems I have insulted the intelligence of a hacker who
thinks he was all-elite when the account on nauticom was revoked, and him
and his friends have waged revenge on me. I have no idea what to do. I am
ICMP flooded about 5 times every night, and it's REALLY a pain.
I have written to the sysadmin of the system and recieved no response at
all.. What am I supposed to do after that step? :p
1 IP 142.207.112.20 -> 205.232.34.155 len 572 prot 1
1 IP 142.207.112.20 -> 205.232.34.155 len 572 prot 1
1 IP 142.207.112.20 -> 205.232.34.155 len 572 prot 1
1 IP 142.207.112.20 -> 205.232.34.155 len 572 prot 1
<over 15000 of these omitted>
That's what I got when I enabled IP tracing...
*** Resolved 142.207.112.20 to ugrad.unbc.edu
And I resolved it too, looked it up on internic, and no response after a
week. I'm really getting sick of this. I dont have to go on IRC for it to
start, he just fingers @harmony.lightlink.com for my IP address..
Well, what should I do? :(
-----
Lucas Madar, madar@lightlink.com, Rotundo on IRC - CService Helper.
http://www.lightlink.com/madar/
Technical Details
Message-ID:
<Pine.BSI.3.93.960426225113.19749H-100000@sidhe.memra.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 106393,cb908c5fb23ed6bf,start X-Google-Attributes: gid106393,public From: Michael Dillon <michael@memra.com> Subject: ICMP Flooding, again. (fwd) Date: 1996/04/26 Message-ID: <Pine.BSI.3.93.960426225113.19749H-100000@sidhe.memra.com> X-Deja-AN: 151691913 organization: Memra Software Inc. - Internet consulting content-type: TEXT/PLAIN; charset=US-ASCII mime-version: 1.0 newsgroups: bc.bcnet