[nsp-sec] DNS and SNMP Reflection Attack Hosts

[SURFcert - Peter]

Krista

Krista Hickey wrote on 24-06-2013 07:25:
> ----------- nsp-security Confidential --------
> 
> File 622894 contains ~45K DNS resolvers observed attacking a host June 19, =
> 2013 (peak approx 1.5Gbps)
> 
> File 3952583 contains ~28K SNMP resolvers observed attacking a different ho=
> st June 21, 2013 (peak approx 1Gbps)

Can you disclose the attacked hosts in question? A number of the IP
addresses are NAT of dynamic.

-- 
Peter Peters                     /------\           SURFnet bv
SURFcert                         | SURF |           cert.surfnet.nl
cert at surfnet.nl                  \-----\ \-----\    Postbus 19035
PGP Key ID 0x5A52C966                   | CERT |    NL-3501 DA  Utrecht
+31 30 2305 305                         \------/    fax: +31 30 2305 329

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 544 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20130624/41e6ac34/attachment-0001.sig>