[100762] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Abusive traffic from Microsoft China?

daemon@ATHENA.MIT.EDU (David Hubbard)
Thu Nov 8 12:23:42 2007

Date: Thu, 8 Nov 2007 12:22:43 -0500
From: "David Hubbard" <dhubbard@dino.hostasaurus.com>
To: <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu


Just wondering if anyone else is seeing huge random
floods of traffic from:

inetnum:      202.96.51.128 - 202.96.51.255
netname:      MICROSOFT-CO
descr:        Microsft (China) Co.Ltd
country:      CN
admin-c:      CH455-AP
tech-c:       SY21-AP
mnt-by:       MAINT-CNCGROUP-BJ
changed:      suny@publicf.bta.net.cn 20060926
status:       ALLOCATED NON-PORTABLE
source:       APNIC
changed:      suny@publicf.bta.net.cn 20060926

On a nearly daily basis we see them randomly open
thousands of connections from a variety of addresses
in that block to multiple servers.  I've emailed
of coruse but that results in nothing.  Probably
will just end up blocking them.

Thanks,

David

home help back first fref pref prev next nref lref last post