[nsp-sec] DDOS Fun

[Leif Nixon]

Leif Nixon <nixon at nsc.liu.se> writes:

> "King, Link" <Link.King at neustar.biz> writes:
>
>> Attached are the current heavy hitters.  The signature is TCP SYN (port
>> 53) and UPD/53 with AAAAAA's stuffed in the packet (large UDP packets).
>> These are authoritative nameservers so don't kill all TCP/UDP 53 traffic
>> but if possible please deal with the sources.
>
> Working on this one.
>
> 41943   | 217.25.40.6      | 217.25.32.0/20      | SE | ripencc  | 2006-02-10 | VMI-KISTA Vaddo Media Information IS AB

OK, it should shortly be off the net.

-- 
Leif Nixon - Security officer
National Supercomputer Centre - Swedish National Infrastructure for Computing
Nordic Data Grid Facility - European Grid Infrastructure