North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Monumentous task of making a list of all DDoS Zombies.

  • From: Rubens Kuhl Jr.
  • Date: Fri Feb 06 15:57:41 2004
 
You probably want to make a list of vulnerable hosts that fall to exploits like this:
http://server-ip-here/scripts/../../winnt/system32/ping.exe
 
Most DDoS zombies will use spoofed IP packets to attack its victim, so filtering the source will not relief your pain.
 
 
Rubens
 
----- Original Message -----
Sent: Friday, February 06, 2004 7:15 PM
Subject: Monumentous task of making a list of all DDoS Zombies.

            Is there a list maintained anywhere of all hosts that have been identified as a DDoS zombie? Or attack box? We got hit with an attack from more than 60 IPs last night and I'd like to add them to any list that anyone has started.

 

Thanks,

-Drew