[Operators] DoS attacker: "mafia_rullezz_*"

[Nigel Kukard]

On 12/02/11 12:25, Nicolas Vérité wrote:
> Hi all,
>
> Just a quick email to let you know that we are facing DoS attack on
> Hosted.IM, our XMPP service hosting platform.
> The attacker has "mafia_rullezz_*" in its multiple JIDs. It just sends
> messages. At least another XMPP server suffered from these kind of
> entities.
> Regards

I get registration requests and blackholed all the IP's I saw 
registrations from.

Not sure if you're the victim or host that he's using, but ... here is 
my blackhole list

blackhole 91.103.156.182
blackhole 81.177.160.8
blackhole 62.109.3.92
blackhole 85.115.234.116
blackhole 41.107.137.39
blackhole 81.176.229.236
blackhole 81.177.33.141
blackhole 41.201.239.3
blackhole 89.112.10.50
blackhole 87.98.168.93
blackhole 195.110.32.60
blackhole 87.251.157.0/24

-N


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5205 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mail.jabber.org/pipermail/operators/attachments/20111202/91439aec/attachment.bin>