[nsp-sec] On-going DDoS: 195.70.13.84

[Nicolas FISCHBACH]

A financial sector customer in GVA is getting hammered for a couple
of days now by an attacker that keeps changing the attack type and
seems a bit too clever.

Any intelligence you may have on these two IPs is welcome (C&C and co):

 195.70.13.84 (primary site)
 64.209.134.8 ("backup" site)

Thanks,
Nico.
-- 
Nicolas FISCHBACH
Senior Manager - Network Engineering/Security - COLT Telecom
e:(nico at securite.org) w:<http://www.securite.org/nico/>