[nsp-sec] DDoS targeting 130.237.157.97

Rob Thomas robt at cymru.com
Thu Nov 19 12:22:21 EST 2009


Hi, Torbjorn.

Apologies for the latency.

> 130.237.157.97, which is a server for Stockholm university, has been
> the victim of DDOS attacks (port 80), the last of which happened
> yesterday, 16:th.

We see two common threads between the attacking hosts:

   1. Sources of spam.

   2. Torpig nodes.

That's all I have presently.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
https://www.team-cymru.org/
ASSERT(coffee != empty);




More information about the nsp-security mailing list