[nsp-sec] Ongoing attack against 95.172.6.180
Chris Morrow
morrowc at ops-netman.net
Sun Nov 7 11:25:04 EST 2010
David has a corp-mail-issue, which I think we helped resolve, but... in
the case that this is still ongoing:
On Sat, 6 Nov 2010 21:24:00 -0000
"David Freedman" <david.freedman at eu.clara.net> wrote:
> From: "David Freedman" <david.freedman at eu.clara.net>
> To: <nsp-security at puck.nether.net>
> Subject: Ongoing attack against 95.172.6.180
> Date: Sat, 6 Nov 2010 20:01:02 -0000
>
> Would appreciate it any sources are spotted and nuked, top talkers so
> far:
>
>
> 29550 | 213.175.195.240 | SIMPLYTRANSIT Simply Transit Ltd
> 13213 | 83.170.113.117 | UK2NET-AS UK-2 Ltd Autonomous System
> 47205 | 79.98.24.160 | HOSTEX HOSTEX autonomous system
> 9931 | 122.155.7.128 | CAT-AP The Communication Authoity of
> Thailand, CAT 6939 | 216.218.226.194 | HURRICANE - Hurricane
> Electric, Inc.
>
> Seems to be random UDP
>
> Dave.
>
> ------------------------------------------------
> David Freedman
> Group Network Engineering
> Claranet Limited
> http://www.clara.net
More information about the nsp-security
mailing list