[nsp-sec] DDoS targeting 130.237.157.97

[Jose Nazario]

On Nov 17, 2009, at 9:54 AM, Torbjorn.Wictorin at cert.sunet.se wrote:

> 130.237.157.97, which is a server for Stockholm university, has been
> the victim of DDOS attacks (port 80), the last of which happened
> yesterday, 16:th.

i've got nothing here for a possible C&C. :-/

_____________________________
jose nazario, ph.d. jose at arbor.net
manager of security research, arbor networks
http://asert.arbor.net/