[nsp-sec] Multiple DDoS attacks

[Rob Thomas]

Hi, team.

Apologies if you read my bits elsewhere.

> Anyone gathering intel on?
> 
> Remote Host	Port Number
> 213.33.116.41	53
> 216.199.83.203	80
> 213.23.243.210	443

We see lots of traffic, though very little established connectivity.  It
seems to pick up on or about 2009-07-06 10:35:26 UTC.

We see established connections to 213.23.243.210 TCP 443 on or about
2009-07-06 14:07:04 UTC.  There's no response from 213.23.243.210 TCP
443 after about 2009-07-06 15:08:19 UTC

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru Research NFP
https://www.team-cymru.org/
cmn_err(CEO_PANIC, "Out of coffee!");