[nsp-sec] Ongoing attack against 95.172.6.180

Chris Morrow morrowc at ops-netman.net
Sun Nov 7 11:25:04 EST 2010


David has a corp-mail-issue, which I think we helped resolve, but... in
the case that this is still ongoing:

On Sat, 6 Nov 2010 21:24:00 -0000
"David Freedman" <david.freedman at eu.clara.net> wrote:

> From: "David Freedman" <david.freedman at eu.clara.net>
> To: <nsp-security at puck.nether.net>
> Subject: Ongoing attack against 95.172.6.180
> Date: Sat, 6 Nov 2010 20:01:02 -0000
> 
> Would appreciate it any sources are spotted and nuked, top talkers so
> far:
> 
> 
> 29550   | 213.175.195.240  | SIMPLYTRANSIT Simply Transit Ltd
> 13213   | 83.170.113.117   | UK2NET-AS UK-2 Ltd Autonomous System
> 47205   | 79.98.24.160     | HOSTEX HOSTEX autonomous system
> 9931    | 122.155.7.128    | CAT-AP The Communication Authoity of
> Thailand, CAT 6939    | 216.218.226.194  | HURRICANE - Hurricane
> Electric, Inc.
> 
> Seems to be random UDP
> 
> Dave.
> 
> ------------------------------------------------
> David Freedman
> Group Network Engineering
> Claranet Limited
> http://www.clara.net



More information about the nsp-security mailing list