[nsp-sec] Got traffic?

[Rob Thomas]

Hey, Nick.

> Are folks seeing lots of requests destined to any of these IP addresses
> (UDP based):
> 
> 156.154.100.3
> 156.154.101.3
> 156.154.102.3
> 156.154.103.3

It has increased a bit over the past two days.

  Flows  Date UTC
  95480 2009-07-13
  96692 2009-07-14
 105185 2009-07-15
 101963 2009-07-16

Here is what we see over the past several hours 2009-07-16 UTC:

  Flows  Hour UTC
   3170 00
   3323 01
   3246 02
   2547 03
   2673 04
   3306 05
   4465 06
   5148 07
   6181 08
   5717 09
   5671 10
   5074 11
   5753 12
   5235 13
   5804 14
   5157 15
   4956 16
   5547 17
   5396 18
   4209 19
   4413 20
   3037 21
   1444 22

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.team-cymru.org/
cmn_err(CEO_PANIC, "Out of coffee!");