[nsp-sec] List of ssdp-reflection DDoS participants (was: Persistent and escalating DDoS against the Norwegian academic library system provider)

[Fronenbroek, Kick]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi Rune, ACK for 6848, 9143, 14638 and 22047 (other list no hits). Passing along to the respective abuse / Security teams.

Regards,
Kick



On 09 Apr 2015, at 11:18 , Rune Sydskjor <rune.sydskjor at uninett.no> wrote:

- ----------- nsp-security Confidential --------

Signed PGP part
Hi teams,

We had another DDoS against 129.241.16.62:80 this morning.

Attached is a list of participating ssdp reflection hosts. Timestamp
is UTC+2. (The same list has been sent to shadowserver.)

Regards,
Rune Sydskjør, UNINETT CERT

<ssdp-reflection-final.txt>

_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
community. Confidentiality is essential for effective Internet security counter-measures.
_______________________________________________

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
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=XBiC
-----END PGP SIGNATURE-----