[192541] in North American Network Operators' Group
Re: Syn flood to TCP port 21 from priveleged port (80)
daemon@ATHENA.MIT.EDU (Oleg A. Arkhangelsky)
Tue Nov 1 15:23:48 2016
X-Original-To: nanog@nanog.org
From: Oleg A. Arkhangelsky <sysoleg@yandex.ru>
To: Eric Tykwinski <eric-list@truenet.com>
In-Reply-To: <000001d23472$ffbf02f0$ff3d08d0$@truenet.com>
Date: Tue, 01 Nov 2016 22:23:42 +0300
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
01.11.2016, 22:06, "Eric Tykwinski" <eric-list@truenet.com>:
> Oleg,
>
> I'm seeing the same to a single client here source IPs seem to be matching up as well.
> I attached a pcap, just so you can compare.
>
And the same sources:
141.138.128.0 - 141.138.135.255
194.73.173.0 - 194.73.173.127
95.131.184.0 - 95.131.191.255
Massive DDoS against William Hill Organization Ltd?
--
wbr, Oleg.
"Anarchy is about taking complete responsibility for yourself."
Alan Moore.
