[nsp-sec] ATTN SAVVIS: UDP love from 208.133.146.26 [FICORA #201009]

Tue Sep 23 10:46:39 EDT 2008

Greetings,

We have received reports of UDP love originating from 208.133.146.26. 

Targets are at least 193.65.90.182 and 193.110.191.2. According 
to report we've received this seems not to be spoofed - 
in this case we don't have first-level access to data. 

If you see suspicious UDP flows to this address - please investigate. 

--Kauto

Kauto Huopio - kauto.huopio at ficora.fi
Senior information security adviser
Finnish Communications Regulatory Authority  / CERT-FI
tel. +358-9-6966772, fax +358-9-6966515, mobile +358-50-5826131
CERT-FI watch desk daytime: +358-9-6966510
CERT-FI 24/7 on-call duty officer: +358-44-0120123 / http://www.cert.fi