[Operators] DoS attacker: "mafia_rullezz_*"
Nigel Kukard
nkukard at lbsd.net
Fri Dec 2 12:27:50 UTC 2011
On 12/02/11 12:25, Nicolas Vérité wrote:
> Hi all,
>
> Just a quick email to let you know that we are facing DoS attack on
> Hosted.IM, our XMPP service hosting platform.
> The attacker has "mafia_rullezz_*" in its multiple JIDs. It just sends
> messages. At least another XMPP server suffered from these kind of
> entities.
> Regards
I get registration requests and blackholed all the IP's I saw
registrations from.
Not sure if you're the victim or host that he's using, but ... here is
my blackhole list
blackhole 91.103.156.182
blackhole 81.177.160.8
blackhole 62.109.3.92
blackhole 85.115.234.116
blackhole 41.107.137.39
blackhole 81.176.229.236
blackhole 81.177.33.141
blackhole 41.201.239.3
blackhole 89.112.10.50
blackhole 87.98.168.93
blackhole 195.110.32.60
blackhole 87.251.157.0/24
-N
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5205 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mail.jabber.org/pipermail/operators/attachments/20111202/91439aec/attachment.bin>
More information about the Operators
mailing list