[nsp-sec] Ongoing attack against 95.172.6.178

[David Freedman]

There has been a mid/low level TCP SYN attack against this host for the past
few days, it has increased somewhat today, the original targets were

109.109.253.242
109.109.253.243
109.109.253.244
109.109.253.245
109.109.253.246

Since the customer switched the service to only 95.172.6.178 two days ago,
the attack has moved to this destination.

Would be greatful if anybody could look for flows.

Dave.

------------------------------------------------
David Freedman 
Group Network Engineering
Claranet Limited
http://www.clara.net