DDoS attacks

Rafi Sadowsky rafi-nanog at meron.openu.ac.il
Fri Jul 13 00:08:55 UTC 2001




On Thu, 12 Jul 2001 up at 3.am wrote:

[deleted]
>
> On Thu, 12 Jul 2001, Alexei Roudnev wrote:
>
> > One important notice - most of this kiddies are not from USA.

 How exactly did you get to this conclusion ??

 The smarter script kiddies can crack systems in a few countries and use a
few hops to get the place they installed the zombie master
for example:

 <cracker> -> <Romania> -> <china> -> <Poland(DDoS master>

Good luck to you tracing the attack to the cracker ;-)


-	Rafi

-- 
Rafi Sadowsky                                   rafi at cert.ac.il
 Network Operations Center  |VoiceMail: +972-3-646-0592   FAX: +972-3-646-0454
  ILAN - IUCC -I2(Israel)   |    FIRST-REP for ILAN-CERT(CERT at CERT.AC.IL)
(Israeli Academic Network)  |   (PGP key -> )  http://telem.openu.ac.il/~rafi



> >
> > ----- Original Message -----
> > >
> > > > I can't help but believe that if even 20% of them
> > > > were caught and had to spend just a little time (even hours) with the
> > > > cops, and had their peecees confiscated, you'd not be seeing
> > > > nearly the problems we are now.
>
> James Smallacombe		      PlantageNet, Inc. CEO and Janitor
> up at 3.am							    http://3.am
> =========================================================================
>
>






More information about the NANOG mailing list