[nsp-sec] DDOS against www.de-cix.net

[Klaus Moeller]

Am Mittwoch, 27. Januar 2010 11:15:41 schrieb Wolfgang Tremmel:
> we are now being attacked since Friday. First a TCP-Syn attack which we
> could mitigate by using an external proxy, now a HTTP-Get attack against
> www.de-cix.net (currently 212.224.123.98)
>
> Here a list of bots participating in the attack:

ACK AS 680, 29484 and 34878.

Best regards,
		Klaus Möller, DFN-CERT

-- 
Dipl. Inform. Klaus Moeller (Incident Response Team)
Phone: +49 40 808077-555, Fax: +49 40 808077-556

DFN-CERT Services GmbH, https://www.dfn-cert.de,  Phone  +49 40 808077-555
Sitz / Register: Hamburg, AG Hamburg, HRB 88805,  Ust-IdNr.:  DE 232129737
Sachsenstrase 5, 20097 Hamburg/Germany, CEO: Dr. Klaus-Peter Kossakowski

17. DFN Workshop    "Sicherheit in vernetzten Systemen"    09./10.02.2010
Informationen unter https://www.dfn-cert.de/veranstaltungen/workshop.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 486 bytes
Desc: This is a digitally signed message part.
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20100127/088ea23e/attachment-0001.sig>