[nsp-sec-jp] Source IP list for UDP attack 2007-06-30 / 19 Gbps of UDP1500

[Shuichi Ohkubo]

$BBg5WJ]!w$5$/$i%$%s%?!<%M%C%H$G$9!#(B

> 9370    | 59.106.19.37     | -Allocated by APNIC-
> 9371    | 210.188.199.195  | -Allocated by APNIC-
> 9371    | 219.94.128.153   | -Allocated by APNIC-

$B3NG'$7$F$_$^$7$?$,!"(B7/2 23:50(JST)$B8=:_!"%Q%1%C%H$O4QB,$5$l$^$;$s$N$G!"(B
$B<}B+$7$F$$$k$+$H;W$$$^$9!#(B

$B0J>e!"$h$m$7$/$*4j$$$7$^$9!#(B

> NSP-SEC-JP$B3F0L!"(B
> 
> 2007-07-01 05:55:14 JST$B$K!"(B 208.98.32.246$B$KBP$9$k(BUDP (1500byte)
> flooding$B%"%?%C%/$,4QB,$5$l$^$7$?!#(B
> $B!J%?!<%2%C%H$N%]!<%HHV9f$O!"(B1080$B$i$7$$$,!"$=$l$i$N$9$Y$F$O$*CN$i$;(B
> $B$G$-$^$;$s!K(B
> 
> $B!t(B19G$B$C$F$9$4$$$G$9$M!D!#(B
> 
> 
> $B0J2<$N%[%9%H$+$i%"%?%C%/$,Aw$i$l$F$-$F$$$^$9!#!J(Budp spoofing$B$N(B
> $B2DG=@-$b$"$j$^$9!K(B
> 
> $B3F(BISP$B$K$F$43NG'2<$5$$!#(B
> 
> 
> 2519    | 219.117.242.117  | JPNIC-ASBLOCK-AP JPNIC
> 9370    | 59.106.19.37     | -Allocated by APNIC-
> 9371    | 210.188.199.195  | -Allocated by APNIC-
> 9371    | 219.94.128.153   | -Allocated by APNIC-
> 17506   | 219.123.156.45   | JPNIC-JP-ASN-BLOCK Japan Network
> 
> 
> 
> Forwarded by Taka Mizuguchi <taka at ntt.net>
> ----------- nsp-security Confidential --------
> 
> Hi
> 
> Steve Gill asked me to pass this on (he is on vacation)
> 
> 2007-06-30 20:55:14 GMT UDP (1500byte) flood against 208.98.32.246  
> (target port seems to be 1080 but details aren't provided for all of  
> them)
> 
> IPs which may or may not have been participating (i.e. udp spoofing  
> always a possibility)
> 
> Regards
> 
> 
> 
> 
> -----
> Taka Mizuguchi
> taka at ntt.net
> 
> 


--------
$B$5$/$i%$%s%?!<%M%C%H(B($B3t(B) $B5;=QIt(B
$BBg5WJ]=$0l(B <ohkubo at sakura.ad.jp>
$B")(B170-0013 $BK-Eg6hElCSB^(B3-13-3 $B at 1OBCSB^%S%k(B 6F
TEL: 03-5911-0235   FAX: 03-5911-0236