URIBL, SURBL and Spamhaus suffer SYN floods
(2 Comments) Posted in technology by Mark on June 7th, 2007

Daryl C. W. O’Shea: Lazy Network Engineer » URIBL, SURBL and Spamhaus suffer SYN floods

In case you ever needed evidence that URI blacklists are effective or that spammers don’t like Spamhaus, you’ve now got a DDoS SYN flood attack to back up that argument. The web mirrors for the three sites have been down for most of the day due to what’s reported by URIBL as “heavy syn floods for anyone operating a web mirror for uribl, surbl, or spamhaus”. The SpamAssassin Rules Emporium (SARE) website is also down. It is hosted on one of the URIBL mirrors. As of tonight, Spamhaus’ website is back up and running on a new IP. I’m really surprised that this didn’t happen a lot sooner.


This entry was posted on Thursday, June 7th, 2007 at 6:48 am and is filed under technology. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

2 Responses to “URIBL, SURBL and Spamhaus suffer SYN floods”

  1. Privacy and Identity Theft » Blog Archive » The New Face of DDoS: Spamhaus attacked, and Estonia asks Russia for help June 7th, 2007 at 2:13 pm

    [...] In early June 2007, anti-spam stalwart SpamHaus was attacked with a massive SYN flood, taking down several of their mirrors that host their anti-spam and anti-phishing [...]

  1. Mark June 7th, 2007 at 3:22 pm

    Thank you for the link, Dave. Like you, I thought SYN attacks had all but disappeared. It’s kinda scary for sys-admins like me to see this type of behavior increasing …

Leave a Reply

You must be logged in to post a comment.

Bad Behavior has blocked 41 access attempts in the last 7 days.