Abusive traffic from Microsoft China?

David Hubbard dhubbard at dino.hostasaurus.com
Thu Nov 8 17:22:43 UTC 2007


Just wondering if anyone else is seeing huge random
floods of traffic from:

inetnum:      202.96.51.128 - 202.96.51.255
netname:      MICROSOFT-CO
descr:        Microsft (China) Co.Ltd
country:      CN
admin-c:      CH455-AP
tech-c:       SY21-AP
mnt-by:       MAINT-CNCGROUP-BJ
changed:      suny at publicf.bta.net.cn 20060926
status:       ALLOCATED NON-PORTABLE
source:       APNIC
changed:      suny at publicf.bta.net.cn 20060926

On a nearly daily basis we see them randomly open
thousands of connections from a variety of addresses
in that block to multiple servers.  I've emailed
of coruse but that results in nothing.  Probably
will just end up blocking them.

Thanks,

David



More information about the NANOG mailing list