[nsp-sec] Looking for AS12880 contact, Tehran University

[Brian Epstein]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

nsp-sec,

	We have been attacked a few times from the IP addresses below.

85.185.163.14
217.218.52.240

	I believe that these are associated with the University of Tehran.  The
attack was a denial of service (DoS) attack on the following dates and
times:

85.185.163.14 -  [05/Oct/2008:12:01:35 -0400]
85.185.163.14 -  [07/Oct/2008:14:08:59 -0400]
217.218.52.240 - [17/Oct/2008:00:09:28 -0400]

	The attack appears to be simple in nature (repeatedly downloading the
same large video file).

	Do we have any contacts at this University that I can reach out to?

Thanks,
Brian

- --
Brian Epstein <bepstein at ias.edu>                     +1 609-734-8179
Network and Security Officer            Institute for Advanced Study
Key fingerprint = 128A 38F4 4CFA 5EDB 99CE  4734 6117 4C25 0371 C12A
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFI/czkYRdMJQNxwSoRAkcrAKCUboMKZTgsl2yYYeMC6c2eNVTDKQCaAqZ7
utVLpmmRuPpZb+X4Q9aibno=
=kheo
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3296 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20081021/2c0020df/attachment-0001.bin>