[nsp-sec] DDoS against 204.69.234.1/204.74.101.1

[Rodney Joffe]

Looks like it is spoofed. 2 reports of backscatter with no outbound  
traffic to us.


pcap here:

http://layer9.com/~rjoffe/ddospcap1.pcap.gz


On Apr 14, 2009, at 7:20 PM, Rob Thomas wrote:

> ----------- nsp-security Confidential --------
>
> Hey, Rodney.
>
>> We're having some issues at the moment, like this...
>
> Queries running now.  Got a full(er) list of sources?  Likely  
> spoofed or no?
>
> Thanks,
> Rob.
> -- 
> Rob Thomas
> Team Cymru
> http://www.team-cymru.org/
> cmn_err(CEO_PANIC, "Out of coffee!");
>
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp- 
> security
> community. Confidentiality is essential for effective Internet  
> security counter-measures.
> _______________________________________________
>