Hello,
We are getting massive TCP and UDP DDOS attack from 84.47.161.17 targeting our IPs
50.23.212.166
159.253.144.12
159.253.144.13
159.253.144.14
159.253.138.151
159.253.138.152
On ports 8396, 80 and 53
Please stop this ASAP and check whoever behind this attack.
Sample of captured packets: (Time is GMT +2)
============================================
2012-02-28 14:11:50.382791 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.382969 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.382984 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.382998 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.383163 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.383760 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.383775 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.383790 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.383805 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.383914 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.383930 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.383942 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.863364 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.864770 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.864784 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.864798 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.864827 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.864841 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.865107 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.865118 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.865132 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
2012-02-28 14:11:50.866328 IP 84.47.161.17.27960 > 159.253.144.13.8396: UDP, length 685
Please update us with resolution to this issue. We thank you in advance for your quick action and cooperation.
Regards,
Network Management Department
Exa Information Technology
http://www.exa.com.sa