The IP address 149.202.11.155 had to be blocked by our services due to the various alerts received.

The IP address 149.202.11.155 had to be blocked by our services due to
the various alerts received.

Please don’t hesitate to contact our technical support team so that this situation does not become critical.

You can find the logs brought up by our system which lead to this alert.

  • START OF ADDITIONAL INFO —

Attack detail : 4Kpps/3Mbps
dateTime srcIp:srcPort dstIp:dstPort protocol flags packets bytes reason
2023.01.04 16:30:50 CET 149.202.11.155:38764 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:55089 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:50420 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:59972 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:56748 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:35978 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:51888 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:60929 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:56752 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:49238 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:56739 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:48259 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:42091 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:60808 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:41701 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:60426 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:51820 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:36277 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:52115 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN
2023.01.04 16:30:50 CET 149.202.11.155:36446 141.94.141.149:25565 TCP SYN 16384 1277952 ATTACK:TCP_SYN

Posted in OVH