[nsp-sec] DDoS to 212.97.109.168

[Saunders, D'Wayne S]

Kurt,
	Not sure if its much help but I did have a look in our netflow logs (
Sampled ) and I am seeing a lot of UDP port 80 to that destination.

Date:		 Time:		  Proto:  IP Source/Dest:	Ports: 	Size:	Packets:
09/07/11 07:43:11	udp		  144.140.154.25  27960  901   15218	
			  212.97.109.168  80	





Regards,
 
D'Wayne Saunders
AS1221
 







On 7/09/11 8:33 AM, "Kurt Jaeger" <pi at nepustil.net> wrote:

>----------- nsp-security Confidential --------
>
>Hi!
>
>Can you please have a look for packet love (UDP, source port 53)
>to 212.97.109.168 ?
>
>And try to find the source ?
>
>Thanks!
>
>-- 
>MfG/Best regards, Kurt Jaeger                                   9 years
>to go !
>Dr.-Ing. Nepustil & Co. GmbH  fon +49 7123 93006-0  pi at nepustil.net
>Rathausstr. 3                 fax +49 7123 93006-99
>72658 Bempflingen             mob +49 171 3101372
>
>
>_______________________________________________
>nsp-security mailing list
>nsp-security at puck.nether.net
>https://puck.nether.net/mailman/listinfo/nsp-security
>
>Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
>community. Confidentiality is essential for effective Internet security
>counter-measures.
>_______________________________________________