[nsp-sec] UDP53 DDOS -> 174.132.162.7 & 174.120.243.7

[jose nazario]

NACK here. would like to hear what you turn up, mind you, to expand  
our data collection efforts (e.g. new families).

On Sep 24, 2010, at 4:00 AM, Yonglin ZHOU wrote:

> Here in China it is the third day of Middle Autumn Holiday. Our duty
> man reported again about the udp53 ddos towards 174.132.162.7 &
> 174.120.243.7. This attack also happened on Wednesday. Many Chinese
> IPs were controlled to send out the attack packets. However, we have
> not found the C&C server till now.
> Should any team find the C&C please contact me offlist.

_____________________________
jose nazario, ph.d. jose at arbor.net
sr. manager of security research, arbor networks
http://asert.arbor.net/