[AC-Admins] DoS?

[Mirage]

I had an outage earlier, but it wasn't DoS related. Not sure.
-Mir

-- 



On 1/10/2016 8:42 PM, Pippin Bear wrote:
> Anyone else see a bandwidth spike at approx 13:00 UTC on Sunday 10 Jan?
>
> My main transit where bear.anthrochat.net is hosted spiked up to just
> under 1Gpbs (the circuit speed) at 12:57ish and up to a lower value
> at 13:00ish.  I think there were 2 similar spikes in husky's bandwidth
> usage too, but the first one was high enough that the collectd packets
> got lost and I can't see what data rate it actually hit.
>
> I'm not seeing anything unusual in the logs on the machines hosting these
> ircd's, but I'm guessing that's where the traffic was going, given that
> both got hit simultaneously, and it also appears to correspond with the
> moment snowleopard fell over.  Both machines do several other things too,
> not just the ircd.  I can only guess it was just random DoS style traffic
> that didn't get a response (unless it was a port unreachable or RST or
> similar) or get logged.
>
> Anyone else see something similar?  If yes, I will have to assume these
> were targetted at the ircd-hosting machines.  If not, maybe it wasn't
> anything to do with the ircds.  (I can't tell which IP addresses these
> went to or protocol, port, etc.  Bear has a separate IP address on its
> host, though husky doesn't.)
>
> Pippin
> _______________________________________________
> Admins mailing list
> Admins at lists.anthrochat.net
> http://lists.anthrochat.net/mailman/listinfo/admins