[nsp-sec] ACK 15659: DDOS against www.de-cix.net

[Andreas Lorentzen]

ACK for 15659
Sanitized and forwarded to abuse.

Andreas Lorentzen
NextGenTel

-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Wolfgang
Tremmel
Sent: Wednesday, January 27, 2010 11:16 AM
To: nsp-security NSP
Subject: [nsp-sec] DDOS against www.de-cix.net

----------- nsp-security Confidential --------


* PGP Bad Signature, Signed: 01/27/10 at 11:15:37

Hello,

we are now being attacked since Friday. First a TCP-Syn attack which we
could mitigate by using an external proxy, now a HTTP-Get attack against
www.de-cix.net (currently 212.224.123.98)

Here a list of bots participating in the attack:

<....>

best regards,
Wolfgang


-- 
Wolfgang Tremmel                     e-mail: wolfgang.tremmel at de-cix.net
DE-CIX Management GmbH               Phone: +49 69 1730 902-26
Lindleystr. 12, 60314 Frankfurt      Mobile: +49 171 8600 816
Geschaeftsfuehrer Harald A. Summa    Fax: +49 69 4056 2716
Registergericht AG Koeln, HRB 51135  http://www.de-cix.net
Zentrale: Lichtstr. 43i, 50825 Koeln

* Wolfgang Tremmel <wolfgang.tremmel at de-cix.net>
* 0x397A2CAE(L)



_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
community. Confidentiality is essential for effective Internet security
counter-measures.
_______________________________________________