In case you haven't read NANOG lately, there are DDoS attacks against Prolexic (AS32787), apparently using Linux/Unix servers compromised through vulnerabilities in PHP tools... there are a few Swiss ASes in this list, so please have a look. Here are some I spotted myself:
1836 | 194.191.0.1 | AS1836 VIA NET.WORKS/CH Autono 6730 | 195.141.204.164 | SUNRISE sunrise (TDC Switzerla 8928 | 81.31.2.234 | INTEROUTE Interoute Communicat 29097 | 217.26.52.16 | HOSTPOINT-AS Hostpoint GmbH, S
(The source in our own AS559 has already been silenced.)
Merry Christmas,