[nsp-sec] DDOS Fun

Leif Nixon nixon at nsc.liu.se
Wed Sep 19 14:59:48 EDT 2012


"King, Link" <Link.King at neustar.biz> writes:

> Attached are the current heavy hitters.  The signature is TCP SYN (port
> 53) and UPD/53 with AAAAAA's stuffed in the packet (large UDP packets).
> These are authoritative nameservers so don't kill all TCP/UDP 53 traffic
> but if possible please deal with the sources.

Working on this one.

41943   | 217.25.40.6      | 217.25.32.0/20      | SE | ripencc  | 2006-02-10 | VMI-KISTA Vaddo Media Information IS AB

-- 
Leif Nixon - Security officer
National Supercomputer Centre - Swedish National Infrastructure for Computing
Nordic Data Grid Facility - European Grid Infrastructure



More information about the nsp-security mailing list