[nsp-sec] DDoS Targeting 142.176.133.233 & 142.176.133.235

[Rob Thomas]

Hey, Gerard.

Sorry, we came up with bupkes on both IPs.

Thanks,
Rob.


White, Gerard wrote:
> ----------- nsp-security Confidential --------
> 
> Greetings.
> 
>  
> 
> Would appreciate it if folks could check their flows for participants.
> DDoS ongoing today (Monday, November-02-09)
> 
>  
> 
> While we are filtering away DDoS traffic using an IPv4 TTL filter,
> miscreant is actively countering our efforts by changing
> 
> the TTL values in DDoS traffic from their botnet... ugly...
> 
>  
> 
> Thanks in advance.
> 
>  
> 
> GW
> 
> 855 - Bell Aliant
> 
>  
> 
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________

-- 
Rob Thomas
Team Cymru
https://www.team-cymru.org/
ASSERT(coffee != empty);