nanog mailing list archives

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey


From: Florian Weimer <fw () deneb enyo de>
Date: Tue, 27 Sep 2016 13:08:19 +0200

* Mark Andrews:

Dear customer,
       we are seeing <xxxx> traffic coming from your network.

If you need help isolating the source of the traffic here are a few
companies in your city that can help you.

      <list of companies>

This is not a exhaustive list.

Support

We already had the problem in the past that customer notifications for
compromised machines (with confirmed loss of user data, not just
sourcing unexpected packets) looked like advertisements for antivirus
products.  To most customers, this looks like just another scam.


Current thread: