[55772] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

RE: probable DDOS to 195.238.3.33

daemon@ATHENA.MIT.EDU (Bulger, Tim)
Mon Feb 10 15:32:53 2003

Date: Mon, 10 Feb 2003 12:29:12 -0800
From: "Bulger, Tim" <TBulger@ea.com>
To: <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu


Thanks to those who replied with how to find the owner of that IP
address. ;) =20

I was more curious about the cause of the traffic.

Thanks,
Tim


-----Original Message-----
From: Bulger, Tim=20
Sent: Monday, February 10, 2003 12:06 PM
To: nanog@merit.edu
Subject: probable DDOS to 195.238.3.33



We're seeing packets with spoofed source addresses destined to
195.238.3.33 getting dropped on firewalls at several locations going
outbound.  Googling has turned up nothing relating to that destination
IP address.  Is anyone else seeing this?  Anyone know what it is?

Thanks,
Tim


home help back first fref pref prev next nref lref last post