DoS Attack Type ?

MaxFF · Sep 20, 2003

My name is Maximiliano, I'm the network administrator of First Fidelity.

- Does anybody know what type of DoS attack it was?.
- Does it have to be with a vulnerabylty in the sportsbook software? ASI? Softech? etc ...
- Do any of these sportsbooks have a firewall to protect their sites?
- Which Port where they trying to attack with the DoS? 80? 443? 1433? 25?
- Was it Windows? IIS? Apache? vulnerability.

Does anybody have more information about the attack, besides the "they are down".

GringoinCR · Sep 20, 2003

Max, they are coming in with 200 megabits of bandwith. The equivilant of more than 4 T3's. No matter what you do, your routers can not drop the packets fast enough. If you don't enlist help from your link up in the states, you don't have a chance. Even with full cooperation from your uplink, you will still be down off and on.

eh · Sep 20, 2003

- Does anybody know what type of DoS attack it was?.

Distributed attack

- Does it have to be with a vulnerabylty in the sportsbook software? ASI? Softech? etc ...

nope, just overwhelm your pipe with packets

- Do any of these sportsbooks have a firewall to protect their sites?

yes, they can not drop the packets fast enough

- Which Port where they trying to attack with the DoS? 80? 443? 1433? 25?

any and all ports open on the server

- Was it Windows? IIS? Apache? vulnerability.

no platform nor software flaw

Savatage · Sep 20, 2003

A Denial of Service (DoS) attack is a flood of packets that consumes network resources and causes gridlock. This gridlock prevents or denies users access to online resources, which is the origin of the term, "Denial of Service" attack. An attack may originate from a single source (DoS), or remotely from numerous machines (Distributed DoS or DDoS) that have been infiltrated. These pawn-like computers that forward DoS attacks are called “zombies”, and are usually distributed geographically.

Loss of service can impact the ability of a particular network service, such as e-mail, to be available or can cause the temporary loss of all network connectivity and services. Depending upon the type and duration of the attack, unprotected Web sites that fall victim to a DDoS assault may be forced to temporarily limit or cease operation. Further, DDoS attacks are easily accomplished with publicly available hacker tools, and they can be devastating to customers, brand, and revenue.

TTinCO · Sep 20, 2003

Max, if you are actually the Net Admin for FF, it's comical that YOU are asking these questions.

You apparently have NO idea what a DOS attack is, nor do you know how to do a Google search on "denial of service attack" which would have prevented you from publicly proving that you don't know your head from your ass.

You truly have no clue.

Chadster · Sep 20, 2003

<BLOCKQUOTE class="ip-ubbcode-quote"><font size="-1">quote:</font><HR>Originally posted by TTinCO:
Max, if you are actually the Net Admin for FF, it's comical that YOU are asking these questions.

You apparently have NO idea what a DOS attack is, nor do you know how to do a Google search on "denial of service attack" which would have prevented you from publicly proving that you don't know your head from your ass.

You truly have no clue.<HR></BLOCKQUOTE>

Ttinco

This is par for the course. 9 out of 10 supposed "Techs" don't know there ass from a fuzzy hole in the ground there in CR. The ones that do know there shit and there are some that do phucking watch out!

Java · Sep 20, 2003

TTinCo and Jay-

I'm afraid you have your heads up your asses on your response to Max. He asked EXACTLY the right questions. There are many different types of DOS attacks, some of which target only specific ports. Also, some attacks can take advantage of the server software's flaws and making it crash.

The more information everyone can gather, the more chance there is of getting these guys or of defending against them.