[nsp-sec] DOS attack against engineering.columbia.edu (128.59.48.55)

[Joel Rosenblatt]

Hi,

It appears that the web site engineering.columbia.edu was hacked and appeared to be selling Cialis, among other things.  Someone must not like this because 
they are now DDOSing us. We have unhacked the site, but the DDOS is still going on. I guess that it's possible that the traffic is really all of the buyers 
being directed toward us through a fast-flux bot net - in any case, the servers we have that run the site are in real distress.

I am trying to get a list of IPs sending us the packet love, but until then, if you see lots of traffic being directed to that address, it would be nice is it 
could be squelched.

Any help would be greatly appreciated.

Thanks in advance.
Joel

Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel