[nsp-sec-jp] Source IP list for UDP attack 2007-06-30 / 19 Gbps of UDP1500

[Taka Mizuguchi]

$B$5$/$i%$%s%?!<%M%C%H!!Bg5WJ]$5$^(B

$B$43NG'$"$j$,$H$&$4$6$$$^$9!#(B
$B:#$O!"$H$^$C$F$$$k$h$&$G$9$M!#(B

$B$^$?!":FH/$NO"Mm$,Mh$^$7$?$i!"$4O"Mm$5$;$FD:$-$^$9!#(B



On Mon, 2 Jul 2007 23:53:13 +0900
Shuichi Ohkubo <ohkubo ＠ sakura.ad.jp> wrote:

> $BBg5WJ]!w$5$/$i%$%s%?!<%M%C%H$G$9!#(B
> 
> > 9370    | 59.106.19.37     | -Allocated by APNIC-
> > 9371    | 210.188.199.195  | -Allocated by APNIC-
> > 9371    | 219.94.128.153   | -Allocated by APNIC-
> 
> $B3NG'$7$F$_$^$7$?$,!"(B7/2 23:50(JST)$B8=:_!"%Q%1%C%H$O4QB,$5$l$^$;$s$N$G!"(B
> $B<}B+$7$F$$$k$+$H;W$$$^$9!#(B
> 
> $B0J>e!"$h$m$7$/$*4j$$$7$^$9!#(B
> 
> > NSP-SEC-JP$B3F0L!"(B
> > 
> > 2007-07-01 05:55:14 JST$B$K!"(B 208.98.32.246$B$KBP$9$k(BUDP (1500byte)
> > flooding$B%"%?%C%/$,4QB,$5$l$^$7$?!#(B
> > $B!J%?!<%2%C%H$N%]!<%HHV9f$O!"(B1080$B$i$7$$$,!"$=$l$i$N$9$Y$F$O$*CN$i$;(B
> > $B$G$-$^$;$s!K(B
> > 
> > $B!t(B19G$B$C$F$9$4$$$G$9$M!D!#(B
> > 
> > 
> > $B0J2<$N%[%9%H$+$i%"%?%C%/$,Aw$i$l$F$-$F$$$^$9!#!J(Budp spoofing$B$N(B
> > $B2DG=@-$b$"$j$^$9!K(B
> > 
> > $B3F(BISP$B$K$F$43NG'2<$5$$!#(B
> > 
> > 
> > 2519    | 219.117.242.117  | JPNIC-ASBLOCK-AP JPNIC
> > 9370    | 59.106.19.37     | -Allocated by APNIC-
> > 9371    | 210.188.199.195  | -Allocated by APNIC-
> > 9371    | 219.94.128.153   | -Allocated by APNIC-
> > 17506   | 219.123.156.45   | JPNIC-JP-ASN-BLOCK Japan Network
> > 
> > 
> > 
> > Forwarded by Taka Mizuguchi <taka ＠ ntt.net>
> > ----------- nsp-security Confidential --------
> > 
> > Hi
> > 
> > Steve Gill asked me to pass this on (he is on vacation)
> > 
> > 2007-06-30 20:55:14 GMT UDP (1500byte) flood against 208.98.32.246  
> > (target port seems to be 1080 but details aren't provided for all of  
> > them)
> > 
> > IPs which may or may not have been participating (i.e. udp spoofing  
> > always a possibility)
> > 
> > Regards
> > 
> > 
> > 
> > 
> > -----
> > Taka Mizuguchi
> > taka ＠ ntt.net
> > 
> > 
> 
> 
> --------
> $B$5$/$i%$%s%?!<%M%C%H(B($B3t(B) $B5;=QIt(B
> $BBg5WJ]=$0l(B <ohkubo ＠ sakura.ad.jp>
> $B")(B170-0013 $BK-Eg6hElCSB^(B3-13-3 $B ＠ 1OBCSB^%S%k(B 6F
> TEL: 03-5911-0235   FAX: 03-5911-0236

-----
Taka Mizuguchi
taka ＠ ntt.net