[nsp-sec] Anyone at AS4837 - CHINA169-BACKBONE?
Pekka Savola
pekkas at netcore.fi
Tue Jan 11 11:08:59 EST 2011
Hi,
Is there anyone at AS4837 or close by here? *)
There's ongoing attack (well, it has lasted some 5 days now :P) that should be
squashed, last I looked it was 200Kpps.
123.138.22.75 -> 130.234.181.144 various 29bpp UDP packets.
More info:
At 2011-01-06 04:02:45.056 (UTC) a distributed UDP 29-43bpp UDP attack started
against 130.234.181.144. This was some 1.2Mpps. Since then it has quieted down,
but some 100-300Kpps "background noise" has remained still. This is coming from
the single source now.
AS | IP | AS Name
4837 | 123.138.22.75 | CHINA169-BACKBONE CNCGROUP China169 Backbone
*) I looked at https://puck.nether.net/nsp-security/contact/ but it appears to
be incomplete. Not sure if there is better way to find people.
Pekka Savola
AS1741
More information about the nsp-security
mailing list