[nsp-sec] Annoying synfloods: 82.161.224.217 and 82.161.224.160

[Scott A. McIntyre]

Hi,


> 82.161.224.217 = 150Kpps @ 52Mbit
> 82.161.224.160 = 200Kpps @ 75mbit
>
> Both systems are meant to have http services running on them, and as  
> they're colocated with multiple sites running on them, I am not yet  
> sure what the intended destination is (trying to extract that from  
> customer).

Unsurprisingly, these are gaming sites from which one can make,  
apparently, "real money" -- according to the hoster, both IPs are  
sites which operate web-based text games involving (ironically) crime  
as the primary theme.  Mafia, criminality, death, mayhem, etc.

They're operated by two different companies, but happen to be in the  
same line of work.  Explains the motive for the attack.

Scott