[nsp-sec] Freenode attacks

[Dave Monnier]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Team,

Looking for more information on some large attacks against the Freenode
IRC network.

Multiple servers in their infra are getting hit by large (1Gb+) UDP
attacks.  The last attack was yesterday, 030511 between 1600-2200 UTC.
Top targets included the following

140.211.166.3
140.211.166.4
78.129.250.43
213.232.93.3
128.237.157.136

c2, malware, and attribution leads would be welcome.

Thanks,
- -Dave
- -- 
Dave Monnier
Team Cymru
https://www.team-cymru.org/
PGP: http://www.cymru.com/dmonnier/0x7C1AAE55_pub.asc

We just launched our new Training Practice, see
http://www.team-cymru.com/Services/Training/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk1zygYACgkQ+29txnwarlXSjgCfclXfYhOEEWf1eS3jvwmsXFHU
0fEAnRaU8QmD/FNp3+DwNe2NNmTHQhpo
=Lfzh
-----END PGP SIGNATURE-----