[nsp-sec] DDoS targeting 130.237.157.97

[Rob Thomas]

Sadly, we came up with bupkes as well.  :(

I'm running the attackers now.  That'll take a bit.  Please stay tuned!


Jose Nazario wrote:
> ----------- nsp-security Confidential --------
> 
> On Nov 17, 2009, at 9:54 AM, Torbjorn.Wictorin at cert.sunet.se wrote:
> 
>> 130.237.157.97, which is a server for Stockholm university, has been
>> the victim of DDOS attacks (port 80), the last of which happened
>> yesterday, 16:th.
> 
> i've got nothing here for a possible C&C. :-/
> 
> _____________________________
> jose nazario, ph.d. jose at arbor.net
> manager of security research, arbor networks
> http://asert.arbor.net/
> 
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security
> counter-measures.
> _______________________________________________

-- 
Rob Thomas
Team Cymru
https://www.team-cymru.org/
ASSERT(coffee != empty);