[nsp-sec] DDoS against 213.27.239.85 (paging L3+NTT)

[Nicolas FISCHBACH]

Nicolas FISCHBACH wrote:
>
> It's hitting mainly 213.27.239.85 and for some time 213.27.136.168.

A short update, as this customer seems to have seriously pissed off
somebody. We see the same attack (UDP floods to random ports) also
hitting 213.27.146.180/30

Anyone lucky finding the C&C or any other intelligence ?

Thanks,
Nico.
-- 
Nicolas FISCHBACH
Senior Manager - Network Engineering/Security - COLT Telecom
e:(nico at securite.org) w:<http://www.securite.org/nico/>