[nsp-sec] DDoS against 193.219.60.42

[Gabriel Iovino]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 6/7/2013 4:24 AM, Marius Urkis wrote:
> Got a UDP flood against 193.219.60.42, random UDP ports, 92bpp. Looks
> like someone doing exercises or testing botnet since an attack lasted
> for exactly 2 hours, started 17:45 and ended 19:45 (GMT+3).

ACK

1706    | 128.196.155.10   | US | 2013-06-06 17:45:12.323 | UNIV-ARIZ -
University of Arizona

I'll seek controller info too.

Thanks!

Gabe

- --
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iEYEARECAAYFAlGx2PcACgkQwqygxIz+pTuC2wCg4GlIepGohGylTXVSGGn2wCal
icEAoNcTQUqS/OhkMiU0gFpAyp4/PfUz
=3/T4
-----END PGP SIGNATURE-----