Author: Suresh Ramasubramanian Date: To: Jerry Bell CC: Michael Coxe, exim-users Subject: Re: [Exim] fwd fr NANOG: monkeys.dom UPL being DDOSed to death
Jerry Bell [9/24/2003 9:30 AM] :
> escalated up to the tier 1 provider at some point. The ISP can do a few
> things - block traffic from a certain address range or to a certain range of
> ports from coming down your circuit and trace traffic flows to their ingress
> points at the ISP's network. Generally, you can get this kind of response
> by calling the normal help line, telling them you are under attack and need
> to work with their security group.
Problems - the monkeys.com DDoS was from thousands of zombies / trojaned
boxes etc, and the hit was to port 80.
