[nsp-sec] Attack on www.gsn.com 07/23/2011?

[Chris Jackman]

Hello all.

A friend at the GameShow Network asked me to ask
if anyone saw anything against www.gsn.com
on Saturday, July 23rd, 2011, between 12:50pm and 13:00 pm Eastern Time.

I'm told the target was www.gsn.com at 66.150.203.80 and packets were udp
port 113.

I was sent this list of ips:


194.204.42.237  : dsl42-237.uninet.ee.
85.25.135.160   : delta552.server4you.de.
67.207.144.116  : 67-207-144-116.slicehost.net.
174.129.2.77    : ec2-174-129-2-77.compute-1.amazonaws.com.
194.164.225.146 : alexander.paston.co.uk.
184.73.252.136  : viral-manager.com.
203.201.149.67  :
85.25.147.195   : hotel564.server4you.de.
67.207.145.123  : 67-207-145-123.slicehost.net.
184.73.154.140  : ec2-184-73-154-140.compute-1.amazonaws.com.
195.54.198.31   : mail.zdr.ru.
77.111.153.210  : ip-153-210-userpool.zeg.zelkanet.hu.
188.94.232.11   : mail2.kralovice.cz.
74.207.251.120  : li93-120.members.linode.com.

I'm told they blocked 194.204.42.237 first and then the others
faded away.  They noticed some of those hosts answer port 22
as Debian or Ubuntu.

Thanks.
-cj