[89511] in North American Network Operators' Group
Re: Ongoing DDoS helped by non responsive abuse desks
daemon@ATHENA.MIT.EDU (Steve Atkins)
Thu Mar 23 11:24:32 2006
In-Reply-To: <683c90650603230754w47c63873l@mail.gmail.com>
From: Steve Atkins <steve@blighty.com>
Date: Thu, 23 Mar 2006 08:24:03 -0800
To: nanog@merit.edu
Errors-To: owner-nanog@merit.edu
On Mar 23, 2006, at 7:54 AM, Martin Lathoud wrote:
>
> Hi,
>
> One of our web servers got hammered by ~5K req/s for hours from
> browsers with the following referer:
[snip]
>
> target[0]="http://weerona.com/ph/order.php?%rand%"
> target[1]="http://fabutons.info/aw/001/?%rand%"
> target[2]="http://movi96.dayaugusta.com/aspx/search.asp?t=%rand%"
> target[3]="http://www.fakeidonline.com/store.php?%rand%"
> target[4]="http://ccebak.bestti.info/p/?%rand%"
> target[5]="http://www.zpgo.net/pweb7/texpo/?%rand%"
> target[6]="http://www.tex-win.com/productshow.asp?id=1808&%rand%=%
> rand%"
> target[7]="http://7eklp9g3.tagsully.net/p/?%rand%&zz=lowcost"
>
Which of these is your website?
Cheers,
Steve
