[iwar] [fc:DDos.attack.knocks.out.Alldas.de.-.for.good?]

From: Fred Cohen (fc@all.net)
Date: 2001-09-17 16:13:40


Return-Path: <sentto-279987-1995-1000786462-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Mon, 17 Sep 2001 21:16:15 -0700 (PDT)
Received: (qmail 25050 invoked by uid 510); 18 Sep 2001 04:14:39 -0000
Received: from n11.groups.yahoo.com (216.115.96.61) by 204.181.12.215 with SMTP; 18 Sep 2001 04:14:39 -0000
X-eGroups-Return: sentto-279987-1995-1000786462-fc=all.net@returns.onelist.com
Received: from [10.1.4.52] by c3.egroups.com with NNFMP; 18 Sep 2001 04:14:24 -0000
X-Sender: fc@big.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-7_3_2_2); 18 Sep 2001 04:14:22 -0000
Received: (qmail 63323 invoked from network); 17 Sep 2001 23:13:44 -0000
Received: from unknown (10.1.10.27) by m8.onelist.org with QMQP; 17 Sep 2001 23:13:44 -0000
Received: from unknown (HELO big.all.net) (65.0.156.78) by mta2 with SMTP; 17 Sep 2001 23:13:44 -0000
Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id QAA19178 for iwar@onelist.com; Mon, 17 Sep 2001 16:13:40 -0700
Message-Id: <200109172313.QAA19178@big.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen <fc@all.net>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Mon, 17 Sep 2001 16:13:40 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] [fc:DDos.attack.knocks.out.Alldas.de.-.for.good?]
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

DDos attack knocks out Alldas.de - for good?

By John Leyden

Posted: 17/09/2001 at 15:28 GMT

Alldas.de, the well known defacement archive, is once again looking for a
home after a deal to move from its ISP fell through in the wake of a
debilitating hack attack.

Three weeks ago, Alldas was subjected to a week-long distributed denial of
service attack which knocked the site - and its ISP Kvalito - offline.

Kvalito introduced filtering and the DNS record of Alldas.de was updated so
that prospective hackers would be throwing attacks at the site against their
local host instead.

Alldas.de's contract with Kvalito already on the point of expiry and worse
followed when the ISP to which it planned to move dropped the hosting deal.
This has left Alldas.de unavailable at a time of heightened interest in
hacking activity. 

Fredrik Ostergren, a spokesman for Alldas.de, told us the site was looking
looking for a new hosting service, but he was far from optimistic. "I hope
we will be back up soon but it looks dark," he said.

In June this year, Alldas.de weathered a Syn-flood attack that had a
knock-on effect on Kvalito's other customers, throwing some of them online.
Alldas.de received its notice to quit.

At the time, Alldas.de made clear its requirements from a prospective future
landlord. 

The ISP should be able to handle a growing volume of traffic that has
reached 300GB/month, deal with 10 flames per month about port scanning -
though Alldas.de has offered to answer those on its own - and tolerate the
occasional DDoS attack.

After Attrition.org decided to get out of the defacement archiving business
this summer (when it decided it was too much hassle to continue as a hobby),
Alldas.de became the main game in town. Interrorem.com and Safemode.org do
record defacements but their service is not as comprehensive as that of
Alldas.de. 

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Secure your servers with 128-bit SSL encryption! Grab your copy of VeriSign's FREE Guide, "Securing Your Web
site for Business" and learn all about serious security. Get it Now!
http://us.click.yahoo.com/r0k.gC/oT7CAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-09-29 21:08:44 PDT