[nsp-sec] DDoS against 64.29.139.241

[Scott A. McIntyre]

Hi Aaron,

> 
> 
> Still investigating, but here are the sources:
> 
> 489 of them... A small one, but for those who analyze this kind of data.. Sling.
> 
> Cheers,
> Aaron
> 
> [snip]

Looks like there's a fair bit of spoofed traffic -- we got a bit of 53/tcp ACK+RST packets sent to our network, to quite a few destinations which aren't actually connected to customers.   The destination ports here were 1024 and 3072, which I'm sure is a very familiar pattern to most folks here.

Not sure if this helps!

Regards,

Scott A. McIntyre
XS4ALL Internet B.V.