[nsp-sec] DDOS against some SUNET hosts
Torbjorn.Wictorin at cert.sunet.se
Torbjorn.Wictorin at cert.sunet.se
Mon Apr 4 14:37:02 EDT 2011
hello,
since about mars 23:rd, one of our customers has been the subject of
a rather heavy DDOS attack. Most of the traffic against 130.237.157.*. Below is
traffic from today. Note of course that this is UDP, source could be
faked.
Fragmented UDP:s towards 130.237.157.97, looks like target port 8065 mostly. The
'extra dates' below are other dates traffic from this ip has been seen.
Typical packet:
10:04:00.739388 IP (tos 0x0, ttl 122, id 2458, offset 7400, flags [none], proto
UDP (17), length 820) xx.xx.x.x > 130.237.157.97: udp
0x0000: 4500 0334 099a 039d 7a11 ba68 xxxx xxxx E..4....z..h....
0x0010: 82ed 9d61 5858 5858 5858 5858 5858 5858 ...aXXXXXXXXXXXX
0x0020: 5858 5858 5858 5858 5858 5858 5858 5858 XXXXXXXXXXXXXXXX
0x0030: 5858 5858 5858 5858 5858 5858 5858 5858 XXXXXXXXXXXXXXXX
0x0040: 5858 5858 5858 5858 5858 5858 5858 5858 XXXXXXXXXXXXXXXX
0x0050: 5858 5858 5858 5858 5858 5858 5858 5858 XXXXXXXXXXXXXXXX
0x0060: 5858 5858 5858 5858 5858 5858 5858 5858 XXXXXXXXXXXXXXXX
0x0070: 5858 5858 5858 5858 5858 5858 5858 5858 XXXXXXXXXXXXXXXX
0x0080: 5858 5858 5858 5858 5858 5858 5858 5858 XXXXXXXXXXXXXXXX
3 | 18.85.32.4 | US | 2011-04-04 06:59:00 UTC 20110401 | MIT-GATEWAYS - Massachusetts Institute of Technology
209 | 24.56.180.99 | US | 2011-04-04 06:58:27 UTC 20110401 | ASN-QWEST - Qwest Communications Company, LLC
271 | 137.82.143.97 | CA | 2011-04-04 07:00:02 UTC 20110330 20110401 | BCNET-AS - BCnet
376 | 132.208.138.56 | CA | 2011-04-04 07:18:25 UTC 20110330 20110401 | RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ)
376 | 132.208.43.20 | CA | 2011-04-04 07:02:35 UTC 20110330 20110401 | RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ)
812 | 208.124.208.194 | CA | 2011-04-04 06:59:23 UTC 20110330 20110401 | ROGERS-CABLE - Rogers Cable Communications Inc.
812 | 99.238.249.137 | CA | 2011-04-04 06:59:26 UTC 20110330 20110401 | ROGERS-CABLE - Rogers Cable Communications Inc.
812 | 99.249.96.243 | CA | 2011-04-04 06:59:07 UTC 20110330 20110401 | ROGERS-CABLE - Rogers Cable Communications Inc.
852 | 142.59.92.59 | CA | 2011-04-04 06:59:20 UTC 20110330 20110401 | ASN852 - Telus Advanced Communications
855 | 142.163.217.58 | CA | 2011-04-04 07:02:22 UTC 20110330 | CANET-ASN-4 - Bell Aliant Regional Communications, Inc.
855 | 142.166.146.206 | CA | 2011-04-04 07:00:33 UTC 20110330 20110401 | CANET-ASN-4 - Bell Aliant Regional Communications, Inc.
855 | 142.176.160.222 | CA | 2011-04-04 06:59:29 UTC 20110330 | CANET-ASN-4 - Bell Aliant Regional Communications, Inc.
1221 | 120.146.132.201 | AU | 2011-04-04 06:59:25 UTC 20110330 20110401 | ASN-TELSTRA Telstra Pty Ltd
1221 | 203.45.254.185 | AU | 2011-04-04 06:59:01 UTC 20110330 20110401 | ASN-TELSTRA Telstra Pty Ltd
1221 | 60.231.157.66 | AU | 2011-04-04 06:59:11 UTC 20110330 20110401 | ASN-TELSTRA Telstra Pty Ltd
1659 | 163.13.176.224 | TW | 2011-04-04 06:59:21 UTC 20110330 20110401 | ERX-TANET-ASN1 Tiawan Academic Network (TANet) Information Center
1659 | 163.21.142.253 | TW | 2011-04-04 06:59:19 UTC 20110330 | ERX-TANET-ASN1 Tiawan Academic Network (TANet) Information Center
1659 | 163.24.52.140 | TW | 2011-04-04 07:02:17 UTC 20110330 20110401 | ERX-TANET-ASN1 Tiawan Academic Network (TANet) Information Center
1659 | 163.24.75.10 | TW | 2011-04-04 06:59:01 UTC 20110330 20110401 | ERX-TANET-ASN1 Tiawan Academic Network (TANet) Information Center
1659 | 210.243.20.141 | TW | 2011-04-04 07:04:17 UTC 20110330 20110401 | ERX-TANET-ASN1 Tiawan Academic Network (TANet) Information Center
1930 | 193.136.38.161 | PT | 2011-04-04 06:58:15 UTC 20110330 20110401 | RCCN Rede Ciencia Tecnologia e Sociedade (RCTS)
1930 | 193.137.178.220 | PT | 2011-04-04 06:59:14 UTC 20110330 20110401 | RCCN Rede Ciencia Tecnologia e Sociedade (RCTS)
2108 | 193.198.21.3 | HR | 2011-04-04 06:58:56 UTC 20110330 20110401 | CARNET-AS Croatian Academic and Research Network
2108 | 193.198.43.57 | HR | 2011-04-04 06:58:56 UTC 20110330 20110401 | CARNET-AS Croatian Academic and Research Network
2497 | 219.119.136.250 | JP | 2011-04-04 06:58:58 UTC 20110330 20110401 | IIJ Internet Initiative Japan Inc.
2510 | 58.1.229.238 | JP | 2011-04-04 06:59:22 UTC 20110330 20110401 | INFOWEB FUJITSU LIMITED
2510 | 58.1.239.198 | JP | 2011-04-04 06:59:19 UTC 20110330 20110401 | INFOWEB FUJITSU LIMITED
2514 | 202.239.74.166 | JP | 2011-04-04 06:59:22 UTC 20110330 | INFOSPHERE NTT PC Communications, Inc.
2516 | 113.145.209.171 | JP | 2011-04-04 06:59:01 UTC 20110330 20110401 | KDDI KDDI CORPORATION
2516 | 113.146.6.174 | JP | 2011-04-04 06:59:41 UTC 20110330 20110401 | KDDI KDDI CORPORATION
2516 | 113.151.102.150 | JP | 2011-04-04 06:59:21 UTC 20110330 20110401 | KDDI KDDI CORPORATION
2516 | 210.141.102.203 | JP | 2011-04-04 06:58:57 UTC 20110330 20110401 | KDDI KDDI CORPORATION
2519 | 27.96.60.202 | JP | 2011-04-04 06:59:03 UTC 20110401 | VECTANT VECTANT Ltd.
2764 | 210.87.63.58 | AU | 2011-04-04 06:59:28 UTC 20110330 | AAPT AAPT Limited
3243 | 194.65.228.242 | PT | 2011-04-04 06:59:01 UTC 20110330 20110401 | TELEPAC PT Comunicacoes, S.A.
3243 | 212.55.160.123 | PT | 2011-04-04 07:00:48 UTC 20110330 20110401 | TELEPAC PT Comunicacoes, S.A.
3462 | 210.59.168.236 | TW | 2011-04-04 07:04:23 UTC 20110330 20110401 | HINET Data Communication Business Group
3462 | 210.71.253.74 | TW | 2011-04-04 06:57:39 UTC 20110330 20110401 | HINET Data Communication Business Group
3462 | 220.128.156.4 | TW | 2011-04-04 06:59:03 UTC 20110330 20110401 | HINET Data Communication Business Group
3462 | 59.120.210.88 | TW | 2011-04-04 06:58:56 UTC 20110330 20110401 | HINET Data Communication Business Group
3462 | 60.250.235.6 | TW | 2011-04-04 06:59:24 UTC 20110330 20110401 | HINET Data Communication Business Group
3462 | 60.250.241.236 | TW | 2011-04-04 06:59:34 UTC 20110330 20110401 | HINET Data Communication Business Group
3462 | 61.218.92.34 | TW | 2011-04-04 06:59:29 UTC 20110330 20110401 | HINET Data Communication Business Group
3462 | 61.221.219.82 | TW | 2011-04-04 07:10:21 UTC 20110330 | HINET Data Communication Business Group
3786 | 61.40.242.202 | KR | 2011-04-04 06:59:19 UTC 20110330 20110401 | LGDACOM LG DACOM Corporation
4134 | 113.105.128.251 | CN | 2011-04-04 06:59:03 UTC 20110330 20110401 | CHINANET-BACKBONE No.31,Jin-rong Street
4134 | 202.103.100.158 | CN | 2011-04-04 06:59:22 UTC 20110330 20110401 | CHINANET-BACKBONE No.31,Jin-rong Street
4134 | 219.138.139.71 | CN | 2011-04-04 07:03:34 UTC 20110330 | CHINANET-BACKBONE No.31,Jin-rong Street
4134 | 219.139.130.102 | CN | 2011-04-04 06:59:27 UTC 20110330 20110401 | CHINANET-BACKBONE No.31,Jin-rong Street
4134 | 58.220.247.10 | CN | 2011-04-04 06:59:35 UTC 20110330 20110401 | CHINANET-BACKBONE No.31,Jin-rong Street
4134 | 58.53.209.14 | CN | 2011-04-04 06:58:42 UTC 20110330 20110401 | CHINANET-BACKBONE No.31,Jin-rong Street
4134 | 61.137.89.86 | CN | 2011-04-04 06:59:21 UTC 20110330 20110401 | CHINANET-BACKBONE No.31,Jin-rong Street
4323 | 173.227.26.20 | US | 2011-04-04 07:02:23 UTC 20110401 | TWTC - tw telecom holdings, inc.
4515 | 210.176.201.198 | HK | 2011-04-04 06:59:12 UTC 20110330 20110401 | ERX-STAR PCCW IMSBiz
4538 | 125.222.191.87 | CN | 2011-04-04 06:59:18 UTC 20110330 20110401 | ERX-CERNET-BKB China Education and Research Network Center
4538 | 202.117.108.117 | CN | 2011-04-04 06:59:19 UTC 20110330 20110401 | ERX-CERNET-BKB China Education and Research Network Center
4538 | 202.194.36.100 | CN | 2011-04-04 06:59:20 UTC 20110330 20110401 | ERX-CERNET-BKB China Education and Research Network Center
4538 | 202.206.218.79 | CN | 2011-04-04 06:59:24 UTC 20110330 20110401 | ERX-CERNET-BKB China Education and Research Network Center
4538 | 210.39.15.246 | CN | 2011-04-04 06:58:56 UTC 20110330 20110401 | ERX-CERNET-BKB China Education and Research Network Center
4538 | 211.81.120.71 | CN | 2011-04-04 06:58:46 UTC 20110330 20110401 | ERX-CERNET-BKB China Education and Research Network Center
4538 | 211.82.225.239 | CN | 2011-04-04 06:57:52 UTC 20110330 20110401 | ERX-CERNET-BKB China Education and Research Network Center
4538 | 219.218.115.136 | CN | 2011-04-04 06:58:57 UTC 20110330 | ERX-CERNET-BKB China Education and Research Network Center
4538 | 222.200.187.16 | CN | 2011-04-04 06:58:42 UTC 20110330 20110401 | ERX-CERNET-BKB China Education and Research Network Center
4538 | 222.20.95.84 | CN | 2011-04-04 07:07:58 UTC 20110401 | ERX-CERNET-BKB China Education and Research Network Center
4621 | 203.158.130.40 | TH | 2011-04-04 07:06:15 UTC 20110330 | UNSPECIFIED UNINET-TH
4628 | 202.42.236.8 | SG | 2011-04-04 06:59:23 UTC 20110330 20110401 | ASN-PACIFIC-INTERNET-IX Pacific Internet Ltd
4651 | 202.47.251.182 | TH | 2011-04-04 06:59:02 UTC 20110330 20110401 | THAI-GATEWAY The Communications Authority of Thailand(CAT)
4685 | 219.121.10.108 | JP | 2011-04-04 07:01:22 UTC 20110330 | ASAHI-NET Asahi Net
4704 | 210.157.192.19 | JP | 2011-04-04 06:58:43 UTC 20110330 20110401 | SANNET SANYO Information Technology Solutions Co., Ltd.
4713 | 221.186.183.253 | JP | 2011-04-04 06:59:31 UTC 20110330 20110401 | OCN NTT Communications Corporation
4713 | 221.189.115.24 | JP | 2011-04-04 06:58:33 UTC 20110330 20110401 | OCN NTT Communications Corporation
4713 | 60.32.142.46 | JP | 2011-04-04 06:58:56 UTC 20110330 20110401 | OCN NTT Communications Corporation
4713 | 60.32.164.131 | JP | 2011-04-04 06:59:33 UTC 20110330 20110401 | OCN NTT Communications Corporation
4713 | 60.32.178.140 | JP | 2011-04-04 06:58:40 UTC 20110330 20110401 | OCN NTT Communications Corporation
4750 | 58.137.99.189 | TH | 2011-04-04 06:59:23 UTC 20110330 20110401 | CSLOXINFO-AS-AP CS LOXINFO PUBLIC COMPANY LIMITED
4755 | 202.54.4.44 | IN | 2011-04-04 06:58:50 UTC 20110330 20110401 | TATACOMM-AS TATA Communications formerly VSNL is Leading ISP
4755 | 59.162.167.134 | IN | 2011-04-04 07:05:42 UTC 20110330 20110401 | TATACOMM-AS TATA Communications formerly VSNL is Leading ISP
4758 | 180.149.49.225 | IN | 2011-04-04 07:21:49 UTC 20110330 20110401 | NICNET-VSNL-BOARDER-AP National Informatics Centre
4760 | 220.246.68.83 | HK | 2011-04-04 06:58:57 UTC 20110330 | HKTIMS-AP PCCW Limited
4766 | 14.32.87.63 | KR | 2011-04-04 06:59:22 UTC 20110401 | KIXS-AS-KR Korea Telecom
4771 | 219.89.201.14 | NZ | 2011-04-04 06:59:24 UTC 20110330 20110401 | NZTELECOM Netgate
4775 | 203.177.148.248 | PH | 2011-04-04 06:59:31 UTC 20110330 20110401 | GLOBE-TELECOM-AS Globe Telecoms
4775 | 203.177.208.123 | PH | 2011-04-04 06:58:56 UTC 20110330 20110401 | GLOBE-TELECOM-AS Globe Telecoms
4782 | 117.56.57.8 | TW | 2011-04-04 07:00:51 UTC 20110330 20110401 | GSNET Data Communication Business Group
4782 | 210.69.37.253 | TW | 2011-04-04 06:59:01 UTC 20110330 20110401 | GSNET Data Communication Business Group
4788 | 124.13.32.222 | MY | 2011-04-04 07:13:54 UTC 20110330 | TMNET-AS-AP TM Net, Internet Service Provider
4788 | 203.106.242.3 | MY | 2011-04-04 06:58:59 UTC 20110330 20110401 | TMNET-AS-AP TM Net, Internet Service Provider
4788 | 58.26.150.3 | MY | 2011-04-04 06:58:57 UTC 20110330 20110401 | TMNET-AS-AP TM Net, Internet Service Provider
4788 | 58.26.163.17 | MY | 2011-04-04 06:58:56 UTC 20110330 20110401 | TMNET-AS-AP TM Net, Internet Service Provider
4788 | 58.26.249.204 | MY | 2011-04-04 06:58:56 UTC 20110330 20110401 | TMNET-AS-AP TM Net, Internet Service Provider
4788 | 60.49.167.250 | MY | 2011-04-04 06:59:19 UTC 20110330 20110401 | TMNET-AS-AP TM Net, Internet Service Provider
4788 | 60.51.134.109 | MY | 2011-04-04 06:59:32 UTC 20110330 | TMNET-AS-AP TM Net, Internet Service Provider
4788 | 60.52.231.2 | MY | 2011-04-04 06:59:43 UTC 20110330 20110401 | TMNET-AS-AP TM Net, Internet Service Provider
4788 | 60.54.156.133 | MY | 2011-04-04 06:59:26 UTC 20110330 20110401 | TMNET-AS-AP TM Net, Internet Service Provider
4788 | 60.54.242.195 | MY | 2011-04-04 06:58:59 UTC 20110330 20110401 | TMNET-AS-AP TM Net, Internet Service Provider
4808 | 114.113.158.75 | CN | 2011-04-04 06:58:57 UTC 20110330 20110401 | CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network
4808 | 123.126.1.122 | CN | 2011-04-04 06:58:57 UTC 20110330 20110401 | CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network
4808 | 202.108.28.119 | CN | 2011-04-04 06:57:24 UTC 20110330 20110401 | CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network
4808 | 220.113.6.90 | CN | 2011-04-04 06:58:58 UTC 20110330 20110401 | CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network
4808 | 58.68.130.116 | CN | 2011-04-04 06:59:10 UTC 20110330 20110401 | CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network
4835 | 60.28.199.5 | CN | 2011-04-04 06:58:56 UTC 20110330 20110401 | CHINANET-IDC-SN China Telecom (Group)
4837 | 123.147.164.7 | CN | 2011-04-04 06:59:22 UTC 20110401 | CHINA169-BACKBONE CNCGROUP China169 Backbone
4837 | 124.160.66.93 | CN | 2011-04-04 06:59:22 UTC 20110330 20110401 | CHINA169-BACKBONE CNCGROUP China169 Backbone
4837 | 221.193.215.11 | CN | 2011-04-04 06:59:00 UTC 20110330 20110401 | CHINA169-BACKBONE CNCGROUP China169 Backbone
4837 | 221.215.72.238 | CN | 2011-04-04 07:02:20 UTC 20110401 | CHINA169-BACKBONE CNCGROUP China169 Backbone
4837 | 60.12.180.194 | CN | 2011-04-04 06:59:22 UTC 20110330 | CHINA169-BACKBONE CNCGROUP China169 Backbone
4837 | 60.12.194.196 | CN | 2011-04-04 06:58:56 UTC 20110330 20110401 | CHINA169-BACKBONE CNCGROUP China169 Backbone
4837 | 60.208.116.99 | CN | 2011-04-04 06:58:47 UTC 20110401 | CHINA169-BACKBONE CNCGROUP China169 Backbone
4847 | 114.113.158.75 | CN | 2011-04-04 06:58:57 UTC 20110330 20110401 | CNIX-AP China Networks Inter-Exchange
4847 | 220.113.6.90 | CN | 2011-04-04 06:58:58 UTC 20110330 20110401 | CNIX-AP China Networks Inter-Exchange
4854 | 203.113.201.231 | AU | 2011-04-04 06:59:21 UTC 20110330 20110401 | IINET-AU Netspace Online Systems
4854 | 203.113.206.111 | AU | 2011-04-04 06:58:57 UTC 20110330 | IINET-AU Netspace Online Systems
5603 | 193.95.219.44 | SI | 2011-04-04 06:59:35 UTC 20110330 20110401 | SIOL-NET Telekom Slovenije d.d.
6128 | 173.220.184.205 | US | 2011-04-04 06:59:25 UTC 20110330 20110401 | CABLE-NET-1 - Cablevision Systems Corp.
6128 | 65.51.122.144 | US | 2011-04-04 07:05:30 UTC 20110401 | CABLE-NET-1 - Cablevision Systems Corp.
6327 | 24.77.82.51 | CA | 2011-04-04 06:59:09 UTC 20110330 | SHAW - Shaw Communications Inc.
6327 | 24.85.255.59 | CA | 2011-04-04 06:59:24 UTC 20110330 20110401 | SHAW - Shaw Communications Inc.
6327 | 70.64.0.61 | CA | 2011-04-04 07:00:32 UTC 20110330 20110401 | SHAW - Shaw Communications Inc.
6327 | 96.50.0.195 | CA | 2011-04-04 06:58:56 UTC 20110330 20110401 | SHAW - Shaw Communications Inc.
6327 | 96.52.128.96 | CA | 2011-04-04 06:59:53 UTC 20110330 20110401 | SHAW - Shaw Communications Inc.
6389 | 72.149.186.2 | US | 2011-04-04 06:59:23 UTC 20110330 20110401 | BELLSOUTH-NET-BLK - BellSouth.net Inc.
6389 | 72.149.40.116 | US | 2011-04-04 06:59:00 UTC 20110330 20110401 | BELLSOUTH-NET-BLK - BellSouth.net Inc.
6677 | 212.30.220.92 | IS | 2011-04-04 06:59:38 UTC 20110330 20110401 | ICENET-AS1 Siminn hf
6856 | 195.98.74.21 | RU | 2011-04-04 06:58:57 UTC 20110328 20110330 20110401 | IC-VORONEZH-AS IC-VORONEZH
6983 | 72.243.175.7 | US | 2011-04-04 06:59:22 UTC 20110330 20110401 | ITCDELTA - ITC^Deltacom
7016 | 71.206.194.255 | US | 2011-04-04 06:59:20 UTC 20110330 20110401 | CCCH-3 - Comcast Cable Communications Holdings, Inc
7018 | 12.220.139.67 | US | 2011-04-04 06:59:18 UTC 20110401 | ATT-INTERNET4 - AT&T Services, Inc.
7018 | 12.71.157.46 | US | 2011-04-04 06:58:56 UTC 20110401 | ATT-INTERNET4 - AT&T Services, Inc.
7303 | 186.125.158.174 | AR | 2011-04-04 07:04:14 UTC 20110330 20110401 | Telecom Argentina S.A.
7522 | 125.215.119.204 | JP | 2011-04-04 06:59:31 UTC 20110330 20110401 | STCN STNet, Incorporated
7545 | 14.200.39.194 | AU | 2011-04-04 06:59:26 UTC 20110401 | TPG-INTERNET-AP TPG Internet Pty Ltd
7545 | 203.219.138.186 | AU | 2011-04-04 06:58:58 UTC 20110330 20110401 | TPG-INTERNET-AP TPG Internet Pty Ltd
7545 | 60.241.131.79 | AU | 2011-04-04 06:59:15 UTC 20110401 | TPG-INTERNET-AP TPG Internet Pty Ltd
7545 | 60.241.17.150 | AU | 2011-04-04 06:59:47 UTC 20110330 20110401 | TPG-INTERNET-AP TPG Internet Pty Ltd
7545 | 60.241.35.188 | AU | 2011-04-04 07:10:40 UTC 20110401 | TPG-INTERNET-AP TPG Internet Pty Ltd
7545 | 60.242.111.80 | AU | 2011-04-04 06:59:24 UTC 20110401 | TPG-INTERNET-AP TPG Internet Pty Ltd
7552 | 125.235.242.21 | VN | 2011-04-04 07:03:49 UTC 20110330 20110401 | VIETEL-AS-AP Vietel Corporation
7633 | 203.129.197.58 | IN | 2011-04-04 06:59:31 UTC 20110330 20110401 | SOFTNET-AS-AP Software Technology Parks of India - Bangalore
7794 | 64.39.176.2 | CA | 2011-04-04 06:58:56 UTC 20110330 20110401 | GOLDEN - Golden Triangle On Line
8359 | 212.248.90.162 | RU | 2011-04-04 06:58:57 UTC 20110330 20110401 | COMSTAR COMSTAR-Direct global network
8517 | 193.255.197.26 | TR | 2011-04-04 06:58:27 UTC 20110330 20110401 | ULAKNET ULAKNET-ASN
8551 | 62.219.14.159 | IL | 2011-04-04 06:58:58 UTC 20110330 20110401 | BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbone
9121 | 212.156.89.70 | TR | 2011-04-04 06:58:27 UTC 20110330 20110401 | TTNET Turk Telekomunikasyon Anonim Sirketi
9129 | 41.209.16.219 | KE | 2011-04-04 06:59:25 UTC 20110328 20110330 20110401 | KE-UU-NET
9228 | 203.77.226.180 | ID | 2011-04-04 06:59:23 UTC 20110330 20110401 | CENTRALONLINE-ID-AS-AP PT. Total Info Kharisma
9269 | 58.177.220.145 | HK | 2011-04-04 06:58:56 UTC 20110330 20110401 | CTIHK-AS-AP City Telecom (H.K.) Ltd.
9269 | 61.238.244.182 | HK | 2011-04-04 06:59:12 UTC 20110330 20110401 | CTIHK-AS-AP City Telecom (H.K.) Ltd.
9269 | 61.93.228.239 | HK | 2011-04-04 06:58:58 UTC 20110330 20110401 | CTIHK-AS-AP City Telecom (H.K.) Ltd.
9274 | 164.125.88.85 | KR | 2011-04-04 06:58:56 UTC 20110330 20110401 | PUSAN-AS-KR Pusan National University
9299 | 119.92.242.186 | PH | 2011-04-04 07:08:33 UTC 20110330 20110401 | IPG-AS-AP Philippine Long Distance Telephone Company
9329 | 203.94.78.195 | LK | 2011-04-04 06:58:57 UTC 20110330 20110401 | SLTINT-AS-AP Sri Lanka Telecom Internet
9329 | 220.247.234.180 | LK | 2011-04-04 06:59:42 UTC 20110330 | SLTINT-AS-AP Sri Lanka Telecom Internet
9381 | 59.152.214.229 | HK | 2011-04-04 06:58:56 UTC 20110330 20110401 | NEWTT-IP-AP Wharf T&T Ltd.
9394 | 222.41.113.130 | CN | 2011-04-04 06:58:56 UTC 20110330 20110401 | CRNET CHINA RAILWAY Internet(CRNET)
9394 | 222.47.54.140 | CN | 2011-04-04 06:58:56 UTC 20110330 | CRNET CHINA RAILWAY Internet(CRNET)
9394 | 222.51.37.180 | CN | 2011-04-04 06:58:57 UTC 20110330 20110401 | CRNET CHINA RAILWAY Internet(CRNET)
9497 | 202.138.173.137 | PH | 2011-04-04 06:58:57 UTC 20110330 20110401 | DIGITELONE Digital Telecommunications Philippines Inc.
9533 | 202.44.39.120 | TH | 2011-04-04 06:58:56 UTC 20110330 20110401 | KMITNB-AS-AP King Mongkut_s Institute of Technology North Bangkok
9584 | 114.142.146.229 | HK | 2011-04-04 06:58:57 UTC 20110330 20110401 | GENESIS-AP Diyixian.com Limited
9595 | 61.115.122.44 | JP | 2011-04-04 06:59:04 UTC 20110330 20110401 | XEPHION NTT-ME Corporation
9597 | 27.34.164.130 | JP | 2011-04-04 06:59:00 UTC 20110401 | CPI-NET KDDI Web Communications Inc.
9628 | 221.145.236.243 | KR | 2011-04-04 06:58:57 UTC 20110330 20110401 | SSEM-AS-KR Seoul Education Science Research Institute
9680 | 59.120.210.88 | TW | 2011-04-04 06:58:56 UTC 20110330 20110401 | HINETUSA HiNet Service Center in U.S.A
9754 | 203.237.124.223 | KR | 2011-04-04 07:06:17 UTC 20110330 20110401 | CSU-AS CHOSUN UNIVERSITY
9794 | 202.148.9.26 | ID | 2011-04-04 06:59:26 UTC 20110330 20110401 | DNET-ID-AP PT. Core Mediatech (D-NET)
9829 | 210.212.251.195 | IN | 2011-04-04 06:59:22 UTC 20110330 20110401 | BSNL-NIB National Internet Backbone
9829 | 210.212.5.165 | IN | 2011-04-04 06:59:20 UTC 20110330 20110401 | BSNL-NIB National Internet Backbone
9829 | 59.90.131.166 | IN | 2011-04-04 06:59:50 UTC 20110330 20110401 | BSNL-NIB National Internet Backbone
9829 | 59.90.254.45 | IN | 2011-04-04 06:59:38 UTC 20110330 | BSNL-NIB National Internet Backbone
9829 | 59.90.58.192 | IN | 2011-04-04 06:59:32 UTC 20110330 | BSNL-NIB National Internet Backbone
9829 | 59.90.58.88 | IN | 2011-04-04 06:59:23 UTC 20110330 | BSNL-NIB National Internet Backbone
9839 | 210.23.83.107 | MP | 2011-04-04 06:58:57 UTC 20110330 20110401 | MTC-GTEPACIFICA-AS Micronesian Telecommunications Corp
9875 | 202.182.166.182 | ID | 2011-04-04 06:58:56 UTC 20110330 20110401 | PESAT1-AS-AP PT. Pasifik Satelit Nusantara
9885 | 180.149.49.225 | IN | 2011-04-04 07:21:49 UTC 20110330 20110401 | RSMANI-NKN-IN C/0 National Informatics Centre
9905 | 202.137.18.168 | ID | 2011-04-04 06:59:47 UTC 20110330 20110401 | LINKNET-ID-AP Linknet ASN
9905 | 202.137.23.111 | ID | 2011-04-04 06:58:58 UTC 20110330 20110401 | LINKNET-ID-AP Linknet ASN
9919 | 61.66.136.114 | TW | 2011-04-04 06:59:26 UTC 20110330 20110401 | NCIC-TW New Century InfoComm Tech Co., Ltd.
9930 | 210.19.58.246 | MY | 2011-04-04 06:58:56 UTC 20110330 20110401 | TTNET-MY TIME DOTCOM BERHAD
9939 | 203.148.20.110 | CN | 2011-04-04 06:59:00 UTC 20110330 20110401 | ANLAI-AP AS for Anlai
10024 | 203.92.80.228 | SG | 2011-04-04 06:57:52 UTC 20110330 20110401 | LGA-AS-SG-AP LGA International
10094 | 61.6.215.202 | BN | 2011-04-04 07:02:33 UTC 20110330 20110401 | BRUNET-AS BruNet ISP, Telekom Brunei Berhad
10111 | 202.144.207.121 | MY | 2011-04-04 07:06:32 UTC 20110330 20110401 | DATAONE-MY-AP AS for DataOne(Malaysia)
10199 | 115.118.193.250 | IN | 2011-04-04 06:59:25 UTC 20110330 20110401 | TATA-AS Tata Communications Ltd
10430 | 164.116.16.167 | US | 2011-04-04 06:58:43 UTC 20110330 20110401 | WA-K20 - Washington State K-20 Telecommunications Network
10474 | 41.134.100.124 | ZA | 2011-04-04 06:58:58 UTC 20110330 20110401 | NETACTIVE
10474 | 41.134.113.147 | ZA | 2011-04-04 06:59:02 UTC 20110401 | NETACTIVE
10796 | 173.89.246.59 | US | 2011-04-04 07:02:04 UTC 20110330 | SCRR-10796 - Road Runner HoldCo LLC
12455 | 212.49.85.173 | KE | 2011-04-04 06:59:02 UTC 20110330 20110401 | JAMBONET
13124 | 217.18.243.121 | BG | 2011-04-04 06:59:23 UTC 20110330 20110401 | IBGC Eurocom Cable Management Bulgaria Ltd
13490 | 72.241.126.159 | US | 2011-04-04 06:58:59 UTC 20110330 20110401 | BUCKEYECABLEVISION - Buckeye Cablevision, Inc.
15290 | 216.191.146.205 | CA | 2011-04-04 06:59:00 UTC 20110330 20110401 | ALLST-15290 - Allstream Corp.
15525 | 62.28.116.85 | PT | 2011-04-04 06:59:06 UTC 20110330 20110401 | PTPRIMENET PT PRIME - Solucoes Empresariais de Telecomunicacoes e Sistemas S.A.
15525 | 62.28.39.174 | PT | 2011-04-04 06:59:52 UTC 20110330 20110401 | PTPRIMENET PT PRIME - Solucoes Empresariais de Telecomunicacoes e Sistemas S.A.
15525 | 83.240.175.188 | PT | 2011-04-04 06:59:26 UTC 20110330 20110401 | PTPRIMENET PT PRIME - Solucoes Empresariais de Telecomunicacoes e Sistemas S.A.
15808 | 41.215.35.182 | KE | 2011-04-04 07:03:13 UTC 20110401 | Communication Solutions Ltd is an ISP serving
15808 | 41.215.72.195 | KE | 2011-04-04 06:59:10 UTC 20110401 | Communication Solutions Ltd is an ISP serving
16814 | 190.2.39.213 | AR | 2011-04-04 06:58:56 UTC 20110330 20110401 | NSS S.A.
17408 | 202.55.228.72 | TW | 2011-04-04 07:00:20 UTC 20110330 20110401 | ABOVE-AS-AP AboveNet Communications Taiwan
17408 | 202.55.228.73 | TW | 2011-04-04 06:59:19 UTC 20110330 20110401 | ABOVE-AS-AP AboveNet Communications Taiwan
17451 | 202.169.37.93 | ID | 2011-04-04 06:59:05 UTC 20110330 20110401 | BIZNET-AS-AP BIZNET ISP
17488 | 116.75.100.225 | IN | 2011-04-04 06:58:57 UTC 20110330 | HATHWAY-NET-AP Hathway IP Over Cable Internet
17506 | 113.41.158.137 | JP | 2011-04-04 06:58:57 UTC 20110330 | UCOM UCOM Corp.
17564 | 203.217.178.183 | MY | 2011-04-04 06:59:46 UTC 20110330 20110401 | GITN-PCN-AS-AP GITN (M) Sdn. Bhd.
17608 | 113.199.6.240 | KR | 2011-04-04 06:59:36 UTC 20110330 20110401 | ABN-AS-KR ABN
17621 | 220.248.93.52 | CN | 2011-04-04 07:02:20 UTC 20110330 20110401 | CNCGROUP-SH China Unicom Shanghai network
17670 | 203.190.44.30 | ID | 2011-04-04 06:58:57 UTC 20110330 20110401 | INFOKOM-AS PT. Infokom Elektrindo
17676 | 126.117.3.253 | JP | 2011-04-04 06:59:04 UTC 20110330 20110401 | GIGAINFRA Softbank BB Corp.
17676 | 126.12.13.237 | JP | 2011-04-04 06:58:43 UTC 20110330 20110401 | GIGAINFRA Softbank BB Corp.
17762 | 123.252.207.229 | IN | 2011-04-04 06:58:57 UTC 20110330 20110401 | HTIL-TTML-IN-AP Tata Teleservices Maharashtra Ltd
17820 | 203.196.147.53 | IN | 2011-04-04 06:59:20 UTC 20110330 20110401 | DIL-AP DIRECT INTERNET LTD.
17908 | 61.17.188.21 | IN | 2011-04-04 06:58:58 UTC 20110330 20110401 | TCISL Tata Communications
17970 | 219.90.90.7 | PH | 2011-04-04 06:59:21 UTC 20110330 20110401 | INTERISLAND-AS-AP TRI.ph AS Inter-Island Information Systems, Inc., AS Internet Service Provider and Internet Data Center, Manila PH
17974 | 125.160.183.111 | ID | 2011-04-04 06:59:21 UTC 20110330 20110401 | TELKOMNET-AS2-AP PT Telekomunikasi Indonesia
17974 | 125.164.221.43 | ID | 2011-04-04 06:58:56 UTC 20110330 20110401 | TELKOMNET-AS2-AP PT Telekomunikasi Indonesia
17974 | 125.165.40.68 | ID | 2011-04-04 06:59:24 UTC 20110330 20110401 | TELKOMNET-AS2-AP PT Telekomunikasi Indonesia
17974 | 125.166.99.135 | ID | 2011-04-04 06:59:55 UTC 20110330 20110401 | TELKOMNET-AS2-AP PT Telekomunikasi Indonesia
17974 | 222.124.207.43 | ID | 2011-04-04 06:59:00 UTC 20110330 20110401 | TELKOMNET-AS2-AP PT Telekomunikasi Indonesia
17992 | 203.223.130.77 | MY | 2011-04-04 06:59:19 UTC 20110330 20110401 | GTC-MY-SIP-AS Global Transit Communications - Malaysia
17992 | 203.223.151.138 | MY | 2011-04-04 06:59:19 UTC 20110330 20110401 | GTC-MY-SIP-AS Global Transit Communications - Malaysia
18059 | 202.43.161.164 | ID | 2011-04-04 06:59:24 UTC 20110330 20110401 | DTPNET-AS-AP DTPNET NAP
18101 | 220.227.97.101 | IN | 2011-04-04 06:59:19 UTC 20110330 20110401 | RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI
18134 | 219.112.137.209 | JP | 2011-04-04 06:58:59 UTC 20110330 20110401 | KITANET KITA Cable Network
18229 | 182.18.131.162 | IN | 2011-04-04 06:59:26 UTC 20110330 20110401 | CTRLS-AS-IN CtrlS Datacenters Ltd.
18479 | 187.61.7.250 | BR | 2011-04-04 06:58:56 UTC 20110330 20110401 | Plug-In Vanet Sistemas de Comunicao LTDA
19262 | 173.66.89.209 | US | 2011-04-04 06:59:44 UTC 20110330 20110401 | VZGNI-TRANSIT - Verizon Online LLC
19262 | 71.115.3.43 | US | 2011-04-04 06:58:56 UTC 20110330 | VZGNI-TRANSIT - Verizon Online LLC
19262 | 72.95.215.29 | US | 2011-04-04 06:59:22 UTC 20110330 20110401 | VZGNI-TRANSIT - Verizon Online LLC
19429 | 200.119.28.46 | CO | 2011-04-04 07:03:23 UTC 20110330 20110401 | ETB - Colombia
20115 | 71.87.189.227 | US | 2011-04-04 06:58:56 UTC 20110330 20110401 | CHARTER-NET-HKY-NC - Charter Communications
20876 | 83.148.84.109 | BG | 2011-04-04 06:58:56 UTC 20110328 20110330 | EVRO-AS EVRO.NET
21804 | 24.72.29.71 | CA | 2011-04-04 06:58:56 UTC 20110330 20110401 | ACCESS-SK - Access Communications Co-operative Limited
22773 | 72.214.121.94 | US | 2011-04-04 06:58:58 UTC 20110330 | ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.
22773 | 72.215.61.120 | US | 2011-04-04 06:59:21 UTC 20110330 20110401 | ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.
23184 | 76.11.5.98 | CA | 2011-04-04 06:59:21 UTC 20110330 20110401 | PERSONA - PERSONA COMMUNICATIONS INC.
23695 | 202.173.88.114 | ID | 2011-04-04 06:59:10 UTC 20110330 20110401 | ELGANET-AS-ID ELGANET-ASN PT. Elga Yasa Media Internet Service
23953 | 115.85.67.218 | ID | 2011-04-04 06:59:28 UTC 20110330 20110401 | SCBDNET-AS-ID PT ARTHA TELEKOMINDO
23974 | 202.143.147.105 | TH | 2011-04-04 06:58:56 UTC 20110330 20110401 | MOE-EDNET-AS-AP Ministry of education
23974 | 203.172.241.178 | TH | 2011-04-04 07:09:59 UTC 20110330 20110401 | MOE-EDNET-AS-AP Ministry of education
24086 | 125.214.15.235 | VN | 2011-04-04 06:59:25 UTC 20110330 20110401 | ETC-AS-VN Electric Telecommunication Company
24093 | 202.171.186.81 | AU | 2011-04-04 07:03:01 UTC 20110330 20110401 | BIGAIR-AP BIGAIR. Multihoming ASN
24098 | 202.77.91.78 | AU | 2011-04-04 06:58:44 UTC 20110328 20110330 20110401 | ETHERWAVE-AS Fish Telecom Pty. Ltd.
24207 | 222.165.222.146 | ID | 2011-04-04 06:59:28 UTC 20110330 20110401 | EXPRESSNET-AS-ID PT. Net2Cyber Indonesia
24514 | 58.26.136.5 | MY | 2011-04-04 07:10:44 UTC 20110330 20110401 | MYREN-MY Malaysian Research & Education Network
24521 | 203.89.27.252 | ID | 2011-04-04 06:59:28 UTC 20110330 | DATAUTAMA-NET-AS-ID PT. DATA Utama Dinamika
24922 | 193.140.216.29 | TR | 2011-04-04 06:59:23 UTC 20110330 20110401 | HACETTEPE Hacettepe University, located in Ankara, Turkey,
24922 | 193.140.238.102 | TR | 2011-04-04 06:57:53 UTC 20110330 20110401 | HACETTEPE Hacettepe University, located in Ankara, Turkey,
25695 | 64.57.117.243 | LS | 2011-04-04 06:58:57 UTC 20110401 | LEO
25826 | 137.122.215.11 | CA | 2011-04-04 06:59:27 UTC 20110330 20110401 | UOTTAWA - University of Ottawa
29571 | 41.189.36.121 | CI | 2011-04-04 06:58:57 UTC 20110330 20110401 | CITelecom-AS
31983 | 130.15.158.212 | CA | 2011-04-04 06:59:07 UTC 20110330 20110401 | QUEENSU-KINGSTON - Queen_s University
32613 | 72.55.142.249 | CA | 2011-04-04 06:59:28 UTC 20110330 | IWEB-AS - iWeb Technologies Inc.
33363 | 71.41.35.167 | US | 2011-04-04 06:59:00 UTC 20110330 20110401 | BHN-TAMPA - BRIGHT HOUSE NETWORKS, LLC
33770 | 41.72.202.210 | KE | 2011-04-04 06:58:56 UTC 20110330 20110401 | KDN
35471 | 77.234.144.254 | SI | 2011-04-04 06:59:02 UTC 20110328 20110330 20110401 | SGN SGN d.o.o.
35911 | 209.226.23.66 | CA | 2011-04-04 06:59:24 UTC 20110330 20110401 | BNQ-1 - Telebec
36947 | 41.221.23.133 | DZ | 2011-04-04 06:59:29 UTC 20110330 20110401 | FAWRI-AS
36994 | 41.0.30.124 | ZA | 2011-04-04 06:58:57 UTC 20110330 20110401 | Vodacom-VB
37018 | 41.222.208.83 | NG | 2011-04-04 07:05:27 UTC 20110330 20110401 | GALAXYBB-AS
37149 | 41.77.228.44 | TZ | 2011-04-04 06:58:58 UTC 20110328 20110330 20110401 | sixtelecoms-as
37958 | 58.68.130.116 | CN | 2011-04-04 06:59:10 UTC 20110330 20110401 | CNNIC-CHINACACHE-AP Beijing Blue I.T Technologies Co.,Ltd.
38038 | 203.194.112.5 | MN | 2011-04-04 06:58:50 UTC 20110330 20110401 | SANSAR-INTERNET-AS Sansar-Internet Co.,ltd. Internet Service
38182 | 113.23.156.45 | MY | 2011-04-04 06:59:18 UTC 20110330 20110401 | EXTREMEBB-AS-MY Extreme Broadband - Total Broadband Experience
38584 | 202.63.199.54 | PK | 2011-04-04 06:58:56 UTC 20110330 20110401 | CUBEXS-AS-AP CubeXS Pvt Ltd, Internet Service Provider Pakistan
38731 | 115.84.179.212 | VN | 2011-04-04 06:59:24 UTC 20110330 20110401 | VTDC-AS-VN Vietel - CHT Compamy Ltd
38731 | 210.211.108.218 | VN | 2011-04-04 06:57:39 UTC 20110330 20110401 | VTDC-AS-VN Vietel - CHT Compamy Ltd
38776 | 202.90.194.151 | ID | 2011-04-04 06:58:59 UTC 20110330 20110401 | GREENLINKS-AS-ID PT. Bandung Sinergi Akses Teknologi
38895 | 175.41.135.17 | SG | 2011-04-04 07:03:13 UTC 20110330 20110401 | AMAZON-AS-AP Amazon.com Tech Telecom
40029 | 64.46.12.130 | CA | 2011-04-04 06:58:59 UTC 20110330 20110401 | NOVUS-3 - Novus Entertainment Inc.
40029 | 64.46.14.77 | CA | 2011-04-04 06:58:59 UTC 20110330 20110401 | NOVUS-3 - Novus Entertainment Inc.
40029 | 64.46.15.237 | CA | 2011-04-04 06:59:22 UTC 20110330 | NOVUS-3 - Novus Entertainment Inc.
40029 | 64.46.21.56 | CA | 2011-04-04 07:00:07 UTC 20110330 | NOVUS-3 - Novus Entertainment Inc.
40888 | 71.4.185.205 | US | 2011-04-04 06:58:48 UTC 20110330 | COACTIVE-AS-2008 - CoActive Marketing Group, Inc.
41989 | 178.239.117.31 | BG | 2011-04-04 06:57:48 UTC 20110330 20110401 | KTBAC-AS ET BAC Dobrinka Bacanova
42683 | 91.144.138.202 | RU | 2011-04-04 06:59:09 UTC 20110328 20110330 20110401 | ERTH-OREN-AS CJSC _ER-Telecom Holding_ Orenburg branch
45315 | 203.24.77.7 | ID | 2011-04-04 06:59:30 UTC 20110330 20110401 | POLARIS-AS-ID Jaring Semesta Infosolusi, PT
45344 | 210.48.222.71 | MY | 2011-04-04 06:58:58 UTC 20110330 20110401 | IIUM-MY International Islamic University Of Malaysia
45762 | 202.176.14.197 | AU | 2011-04-04 06:59:26 UTC 20110330 20110401 | ACCESS-NETWORKS-AS Access Networks and communications
45899 | 123.25.114.215 | VN | 2011-04-04 06:59:05 UTC 20110330 20110401 | VNPT-AS-VN VNPT Corp
45899 | 222.253.112.146 | VN | 2011-04-04 06:59:09 UTC 20110330 20110401 | VNPT-AS-VN VNPT Corp
47586 | 93.190.20.218 | RU | 2011-04-04 07:07:18 UTC 20110330 20110401 | BUSINESS-SVYAZ Business-Svyaz LTD
55314 | 14.0.18.130 | VN | 2011-04-04 06:57:32 UTC 20110401 | NEWLIFE-AS-VN NEWLIFE COMPANY
55488 | 202.29.4.111 | TH | 2011-04-04 07:02:37 UTC 20110330 20110401 | NRRU-AS-AP Nakorn Ratchasima Rajabhat University
regards,
Torbjörn Wictorin, SUNet CERT
More information about the nsp-security
mailing list