[nsp-sec] [FICORA #182723] DDoS towards Habbo BR servers hosted in Canada (69.90.139/24)

[Huopio Kauto]

Greetings all,

We have received a report of a fairly sizeable UDP DDoS towards
Habbo Hotel (a popular virtual enviroment for kids) Brazil site,
hosted by peer1 @ Canada. Following addresses:

69.90.139.111
.112  
.113
.114
.115

have received around 2 Gbit/s of UDP love from 22th June onwards 
at various times. You might want to look at the whole 69.90.139/24. 

Any information on C&C and other observations is more than welcome. 

--Kauto

Kauto Huopio - kauto.huopio at ficora.fi
Senior information security adviser
Finnish Communications Regulatory Authority  / CERT-FI
tel. +358-9-6966772, fax +358-9-6966515, mobile +358-50-5826131
CERT-FI watch desk daytime: +358-9-6966510 / http://www.cert.fi