nanog mailing list archives
Re: Syn flood to TCP port 21 from priveleged port (80)
From: Oleg A. Arkhangelsky <sysoleg () yandex ru>
Date: Tue, 01 Nov 2016 22:23:42 +0300
01.11.2016, 22:06, "Eric Tykwinski" <eric-list () truenet com>:
Oleg, I'm seeing the same to a single client here source IPs seem to be matching up as well. I attached a pcap, just so you can compare.
And the same sources: 141.138.128.0 - 141.138.135.255 194.73.173.0 - 194.73.173.127 95.131.184.0 - 95.131.191.255 Massive DDoS against William Hill Organization Ltd? -- wbr, Oleg. "Anarchy is about taking complete responsibility for yourself." Alan Moore.
Current thread:
- Syn flood to TCP port 21 from priveleged port (80) Oleg A . Arkhangelsky (Nov 01)
- Re: Syn flood to TCP port 21 from priveleged port (80) Oleg A . Arkhangelsky (Nov 01)
- Message not available
- Re: Syn flood to TCP port 21 from priveleged port (80) Oleg A . Arkhangelsky (Nov 01)
- Message not available
- Re: Syn flood to TCP port 21 from priveleged port (80) Ken Chase (Nov 01)
- RE: Syn flood to TCP port 21 from priveleged port (80) Emille Blanc (Nov 01)
- Re: Syn flood to TCP port 21 from priveleged port (80) Selphie Keller (Nov 01)
- RE: Syn flood to TCP port 21 from priveleged port (80) Emille Blanc (Nov 01)
- Re: Syn flood to TCP port 21 from priveleged port (80) Selphie Keller (Nov 01)
- Re: Syn flood to TCP port 21 from priveleged port (80) Oleg A . Arkhangelsky (Nov 01)
- Re: Syn flood to TCP port 21 from priveleged port (80) Van Dyk, Donovan (Nov 01)
- Re: Syn flood to TCP port 21 from priveleged port (80) Ken Chase (Nov 01)
- Re: Syn flood to TCP port 21 from priveleged port (80) Selphie Keller (Nov 01)
- Re: Syn flood to TCP port 21 from priveleged port (80) Ken Chase (Nov 01)
- Re: Syn flood to TCP port 21 from priveleged port (80) Ken Chase (Nov 01)