[nsp-sec] AS5430 under attack -- assistance needed

[sthaug at nethelp.no]

> AS5430 is under heavy attack since today noon, getting 10 Gbps
> additional traffic from all directions.

Hi Patrick,

Your message was somewhat low on detail - but anyway, from my vantage
point in AS 2116 I saw a couple of cases of spoofed source DNS-based
amplification attacks today, against UDP/53 on these hosts (times in
UTC+2):

194.97.15.21	 14:17 - 14:54
62.104.23.36	 18:20 - 18:39

We have blackholed the attack traffic towards these two hosts at the
AS 2116 border after discovering it.

Regards,

Steinar Haug, AS 2116