Greetings, (my work hat @ CERT-FI on, work email [email protected])
Several Finnish media sites (www.yle.fi, www.mtv3.fi, www.hs.fi etc) have been attacked since Dec 25th. Current target is www.ampparit.com (217.149.58.35). ISP reports traffic originating from Level3 transit. Traffic is > 2 Mpps TCP SYN. I'd like to request immediate trace support - we suspect this is a very small source footprint DOS. All observations to [email protected], cc: to me at work address above. -- Kauto Huopio - [email protected]
