This is just a query for anyone who runs Netflow stats on their pipes,

Do you see any anomalous levels of traffic from these IP addresses?

213.199.149.133 and 213.199.149.227

I see a lot of ICMP code 3 type 4 traffic to these hosts and a lot of HTTPS 
return traffic coming from them.

Thanks

--
Regards,

Giles Coochey, CCNP, CCNA, CCNAS
NetSecSpec Ltd
+44 (0) 8444 780677
+44 (0) 7983 877438
http://www.coochey.net
http://www.netsecspec.co.uk
[email protected]


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to