[nsp-sec] Numerous 1 Gbps DDOS attacks

[Bruce Morgan]

Hi Chris,

This is a different style of attack, very specific and more network rather
than host targetted - I think unrelated to Anonymous.

Regards

bruce


On 22/09/09 12:45 PM, "Chris Morrow" <morrowc at ops-netman.net> wrote:

> 
> 
> On Tue, 22 Sep 2009, Bruce Morgan wrote:
> 
>> ----------- nsp-security Confidential --------
>> 
>> Hi All,
>> 
>> We've seen a number of > 1 Gbps DDOS attacks against even non-existent hosts
>> in our network the past two weeks with the bulk of the traffic coming from
>> AS4134 (China Telecom). The first attack was over a month ago, but the last
>> two weeks has seen activity every couple of days.
> <snip>>
>> Anyone seeing anything that may help track this down? Anyway of identifying
>> the C&C?
> 
> is this related to the 'anonymous' call to action against censorship in
> AU?

-- 
street address:  AARNet, POD 3, 20 Dick Perry Ave, Kensington, WA 6151,
Australia 
m. 0408 882 390     t. +61 8 9289 2212      e. bruce.morgan at aarnet.edu.au
w. www.aarnet.edu.au

important 
This email and any files transmitted with it are confidential, and the
rights of confidentiality in such information are not waived or lost by its
mistaken delivery to you.  Any dissemination, copying, use or disclosure of
the email and/or such files without the permission of AARNet, or the sender,
is strictly prohibited.  If you have received this email in error, please
contact the sender immediately and delete all copies of this transmission.