[Snort-sigs] Attack from .jp IPs

L0rd Ch0de1m0rt l0rdch0de1m0rt at ...2420...
Tue Dec 7 10:18:54 EST 2010


Hello, almost exactly at 7:41 AM this morning multiple servers in my
enterprise are under attack by DDoS with TCP Zeroes-window size
destined to port 1941 and 1207, the hosts appear to resolve PTR as
hideki.tojo.jp, isoroku.yamamoto.jp, tomoyuki.yamashita.jp, and more.
Is anyone else seeing this?

Thanks.

-L0rd C.




More information about the Snort-sigs mailing list