[nsp-sec] DDoS Targeting 142.176.133.233 & 142.176.133.235

[White, Gerard]

Greetings.

 

Would appreciate it if folks could check their flows for participants.
DDoS ongoing today (Monday, November-02-09)

 

While we are filtering away DDoS traffic using an IPv4 TTL filter,
miscreant is actively countering our efforts by changing

the TTL values in DDoS traffic from their botnet... ugly...

 

Thanks in advance.

 

GW

855 - Bell Aliant