[nsp-sec] DDOS against .dk-media AS3292

[Christoph Sprongl]

sorry forget to include AS.. :-(

80.63.11.74 AS3292
80.63.11.95 AS3292

ch


> Hi all,
>
> peter a well-known security guy send a request for help regarding a
> .dk-media DDOS.
> If someone can support him i would appreaciate it :-)
>
> christoph
>
>
>> Several Danish media sites are targeted with a DDoS attack.
>>
>> Have any of you observed DDoS activities against IP 80.63.11.95 or
>> 80.63.11.74?
>>
>> The servers are getting hammered with HTTP requests.
>>
>> A Wireshark dump is attached.
>>
>> Thanks.
>>
>> Med venlig hilsen // Kind Regards
>>
>>
>> Peter Kruse
>> Partner and Securityspecialist
>> CSIS Security Group A/S
>> http://www.csis.dk
>>
>> Vestergade 14 * 8660 Skanderborg * Denmark
>> Tel.: +45 8813 6030 * Mobile: +45 2849 0532
>> Fax: +45 2817 6030 * Email: pkr at csis.dk
>>
>> Key-ID: 0x49006F37
>>
>> Fingerprint: 6675 058F A96F 23A4
>> 7940  0ABA 3C89 2413 FC8C 901E
>
>