[nsp-sec] 7Mpps udp/80 29bpp attack against 82.130.16.98

[Gabriel Iovino]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 7/1/2011 1:50 AM, Pekka Savola wrote:
> Yesterday, the very same kind of 7Mpps attack re-occurred against the
> same target.  This time with 100 sources.  76 earlier hosts were no
> longer participating.  There were 32 new sources.
> 
> The list below includes new sources:

ACK:

> 6122    | 205.221.40.15    | US | 2011-06-30 14:03:45.946 600.011 5.1 | ICN-AS - Iowa Communications Network
> 11078   | 128.148.66.153   | US | 2011-06-30 14:03:45.885 600.065 9.4 | BROWN - Brown University
> 31886   | 131.104.167.130  | CA | 2011-06-30 14:03:46.008 599.939 9.8 | UOGUELPH - University of Guelph

Harri, thanks for providing some details on what one might find on the
machine. That helps!

Gabe

- --
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk4N6PIACgkQwqygxIz+pTsZdgCgzQ/8WefVbebHDgnWWGHXT4RR
1/4AnR4jdzWj0gP9sWWIOzW4IVzDZbkz
=4Kp5
-----END PGP SIGNATURE-----