Snort mailing list archives
Re: [Emerging-Sigs] Attack from .jp IPs
From: Jason Wallace <jason.r.wallace () gmail com>
Date: Tue, 7 Dec 2010 10:26:39 -0500
.jp address on Pearl Harbor Day? That is a little to coincidental IMO... Especially since one of the ports is 1941... On Tue, Dec 7, 2010 at 10:18 AM, L0rd Ch0de1m0rt <l0rdch0de1m0rt () gmail com> wrote:
Hello, almost exactly at 7:41 AM this morning multiple servers in my enterprise are under attack by DDoS with TCP Zeroes-window size destined to port 1941 and 1207, the hosts appear to resolve PTR as hideki.tojo.jp, isoroku.yamamoto.jp, tomoyuki.yamashita.jp, and more. Is anyone else seeing this? Thanks. -L0rd C. _______________________________________________ Emerging-sigs mailing list Emerging-sigs () emergingthreats net http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!
------------------------------------------------------------------------------ What happens now with your Lotus Notes apps - do you make another costly upgrade, or settle for being marooned without product support? Time to move off Lotus Notes and onto the cloud with Force.com, apps are easier to build, use, and manage than apps on traditional platforms. Sign up for the Lotus Notes Migration Kit to learn more. http://p.sf.net/sfu/salesforce-d2d _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs
Current thread:
- Attack from .jp IPs L0rd Ch0de1m0rt (Dec 07)
- Re: [Emerging-Sigs] Attack from .jp IPs Jason Wallace (Dec 07)
- Re: [Emerging-Sigs] Attack from .jp IPs Sandro guly Zaccarini (Dec 07)
- Re: Attack from .jp IPs Matt Olney (Dec 07)
- Message not available
- Re: [Emerging-Sigs] Attack from .jp IPs Mike Cox (Dec 07)
- Re: [Emerging-Sigs] Attack from .jp IPs Steve McChortle (Dec 07)
- Message not available
- Re: [Emerging-Sigs] Attack from .jp IPs Jason Wallace (Dec 07)
- Re: Attack from .jp IPs Martin Roesch (Dec 07)
- Re: Attack from .jp IPs Giles Coochey (Dec 07)
- Re: Attack from .jp IPs Jamie Riden (Dec 07)
- Re: [Emerging-Sigs] Attack from .jp IPs Josh Little (Dec 07)
- Re: [Emerging-Sigs] Attack from .jp IPs Joel Esler (Dec 07)
- Re: [Emerging-Sigs] Attack from .jp IPs evilghost () packetmail net (Dec 07)