OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] Lycos Europe organizing a DDoS attack against spammers

From: Kevin (kkadowgmail.com)
Date: Wed Dec 01 2004 - 12:47:05 CST


On Tue, 30 Nov 2004 13:38:31 +0100 (CET), Feher Tamas
<etomcatfreemail.hu> wrote:
> Lycos Europe organizing a DDoS attack against spammers
>
> Lycos Europe has started organizing a distributed
> denial-of-service attack against web sites run by spammers.
>
> Lycos, via its makelovenotspam.com website,
> is offering a free screensaver for download.
> The screensavers make constant http requests to spam websites.

Can anybody provide pointers on how to detect this traffic
by reviewing squid proxy logs?

I'd guess that at least a few of our (thousands of) users will install
"makelovenotspam", but lacking the authority to lock down
or examine desktops, I'm limited to reviewing access logs after the
fact to track down offenders.

Thanks,

Kevin Kadow

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html