[AC-Admins] DoS?

[Pippin Bear]

Anyone else see a bandwidth spike at approx 13:00 UTC on Sunday 10 Jan?

My main transit where bear.anthrochat.net is hosted spiked up to just
under 1Gpbs (the circuit speed) at 12:57ish and up to a lower value
at 13:00ish.  I think there were 2 similar spikes in husky's bandwidth
usage too, but the first one was high enough that the collectd packets
got lost and I can't see what data rate it actually hit.

I'm not seeing anything unusual in the logs on the machines hosting these
ircd's, but I'm guessing that's where the traffic was going, given that
both got hit simultaneously, and it also appears to correspond with the
moment snowleopard fell over.  Both machines do several other things too,
not just the ircd.  I can only guess it was just random DoS style traffic
that didn't get a response (unless it was a port unreachable or RST or
similar) or get logged.

Anyone else see something similar?  If yes, I will have to assume these
were targetted at the ircd-hosting machines.  If not, maybe it wasn't
anything to do with the ircds.  (I can't tell which IP addresses these
went to or protocol, port, etc.  Bear has a separate IP address on its
host, though husky doesn't.)

Pippin