another outage, likely unrelated

| | Comments (0)
So after the outgoing attack was squashed, there was a massive incoming attack.   The target of that attack has now been blackholed.   


I don't know if the two are related.   The outgoing attack was a compromised host;  I know the person and expect an incident report sometime tomorrow.    But the incoming attack, was it a response?  I don't know.   It was directed at a different IP, so probably not. 


http://traffic.he.net/port.php?key=NckClsQDVOBA6eIv5yB2Te14ILiLy9G+42RSVtlPLQda1k7oYS8PVdz1xjzBCjhEfPDtohjwQkNqIlUguWKRSQ==


note how it seems that just as I had the outgoing attack whipped, I got hit by the incoming attack.     The incoming attack was made more difficult to deal with by the fact that I don't, at the moment, have an out of band link.  This is... bad, as it made getting in to figure out what happened really hard.   

Leave a comment

About this Entry

This page contains a single entry by luke published on February 11, 2014 11:58 AM.

network outage report was the previous entry in this blog.

reboot of crock and apples is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.