Hi Chris, We are seeing bad traffic from the block next door as well, dictionary attacks on ssh, same owner
route: 154.221.25.0/24 descr: Yisu Cloud Ltd origin: AS142403 mnt-by: LARUS-SERVICE-MNT source: AFRINIC # Filtered Jeu 15 mai 2025, à 14:28, Christopher Hawker a écrit : > Hello folks, > > The IP address subnet 154.212.141.0/24 has sent 152 L2TP UDP packets from 55 > different addresses over a 5-hour window to a number of addresses on an > APNIC-delegated subnet that I manage. Apparently, this space was "delegated" > to Cloud Innovation by AFRINIC, and shows that it's under management by > Larus... > > Has anyone seen anything similar? > > > Regards, > Christopher Hawker > > > > _______________________________________________ > APNIC-talk - https://mailman.apnic.net/[email protected]/ > To unsubscribe send an email to [email protected] Regards, _________________ Bertrand Cherrier [email protected]
_______________________________________________ APNIC-talk - https://mailman.apnic.net/[email protected]/ To unsubscribe send an email to [email protected]
