[nsp-sec] HTTP attack against 95.172.6.122 - IP list

[David Freedman]

Hi, following (attached) list participating in an HTTP attack against one of our hosts, 95.172.6.122,
hostname www.techdna.co.uk,
we are currently mitigating it (it is low volume) but thought you may be interested in the client list.

Clients connect using one of three user agents

FCKFK
FUCKFF
Mozilla/4.0+(compatible;+MSIE+5.01;+Windows+NT+5.0;+MyIE+3.01)Cache-Control:+no-store,+must-revalidate

See list attached.

Please let me know if you need any further information.

------------------------------------------------
David Freedman
Group Network Engineering 
Claranet Limited
http://www.clara.net




-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ips3.txt
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20090915/bcfa60d8/attachment-0001.txt>