[nsp-sec] DDoS aimed at 178.251.233.35

[Jaap van Ginkel]

On 12/07/2011 05:04 AM, Daniel Goscomb wrote:
> ----------- nsp-security Confidential --------
>
> Hi All
>
> We are filtering about 4Gbps of attack traffic destined for 178.251.233.35 over various ingress paths.
>
> It is a UDP flood against port 27660.
>
> Our flow stats show the following sources, though I have not yet checked if these are spoofed (a quick look suggests at least not all are). Any help in picking up this traffic on your side and filtering/removing it would be appreciated.
>
> Cheers
>
> Dan

Ack for:
> ASN     | IP                | Packets
> 1133    | 130.89.149.195    | 6000
>