[nsp-sec] FYI

[Jared Mauch]

It appears that someone has been attacking puck for a few days sourced from a few networks in 203.81/16, mostly burmese related.

(or someone is using me to reflect an attack against them).

The specific IPs are:

10985 203.81.64.63
9059 203.81.80.18
8919 203.81.64.3
8891 203.81.166.67
7524 203.81.64.24
4352 203.81.166.98

Anyone with any intel on this, let me know.  They are coming against a variety of ips in 204.42.254.0/27 which all reside on the same hardware.

I have pcaps if anyone is interested.

- Jared