[192548] in North American Network Operators' Group
Re: Syn flood to TCP port 21 from priveleged port (80)
daemon@ATHENA.MIT.EDU (Van Dyk, Donovan)
Tue Nov 1 17:29:32 2016
X-Original-To: nanog@nanog.org
From: "Van Dyk, Donovan" <dvandyk@akamai.com>
To: Ken Chase <math@sizone.org>, "Oleg A. Arkhangelsky" <sysoleg@yandex.ru>
Date: Tue, 1 Nov 2016 19:39:40 +0000
In-Reply-To: <20161101192909.GL29393@sizone.org>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org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