[nsp-sec] UDP/80 flows to 89.185.38.26

[David Freedman]

This attack is still ongoing, though thankfully we are mitigating it.
We are seeing quite a bit of traffic from OVH (AS16276/AS12322) are any of
these folk on list?

Dave.


On 25/12/2011 00:10, "David Freedman" <david.freedman at uk.clara.net> wrote:

>----------- nsp-security Confidential --------
>
>If anybody is seeing UDP/80 flows toward 89.185.38.26, can they please
>squash, we've had an attack ongoing for the past three hours.
>
>Thanks!
>
>David Freedman
>Claranet
>
>
>
>_______________________________________________
>nsp-security mailing list
>nsp-security at puck.nether.net
>https://puck.nether.net/mailman/listinfo/nsp-security
>
>Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
>community. Confidentiality is essential for effective Internet security
>counter-measures.
>_______________________________________________