Skip to content
art_macaw's profile

New Member

 • 

1 Message

Sunday, February 9th, 2014 4:00 PM

UDP packet flood, source Comcast Sanfran

you are filling up my firewall logs really quickly:

from

sjos-cns05.sanjose.ca.sanfran.comcast.net [69.252.96.26]

 

sjos-cns01b.sanjose.ca.sanfran.comcast.net [68.87.76.179]

 

over a maximum of 30 hops:

 

 

and a ton more 

 

What's up?

 

Art

 

02/09/2014 11:44:03.224 - UDP packet dropped - 69.252.96.26, 53, WAN -      74.95.200.121, 3223, WAN -      UDP Port:  3223

02/09/2014 11:45:03.256 - UDP packet dropped - 69.252.96.8, 53, WAN -      74.95.200.121, 3329, WAN -      UDP Port:  3329

02/09/2014 11:46:07.816 - UDP packet dropped - 69.252.96.9, 53, WAN -      74.95.200.121, 3441, WAN -      UDP Port:  3441

02/09/2014 11:47:32.288 - UDP packet dropped - 69.252.96.26, 53, WAN -      74.95.200.121, 3505, WAN -      UDP Port:  3505

02/09/2014 11:48:33.304 - UDP packet dropped - 69.252.96.6, 53, WAN -      74.95.200.121, 3627, WAN -      UDP Port:  3627

02/09/2014 11:50:03.368 - UDP packet dropped - 69.252.96.8, 53, WAN -      74.95.200.121, 3737, WAN -      UDP Port:  3737

02/09/2014 11:51:03.400 - UDP packet dropped - 68.87.76.184, 53, WAN -      74.95.200.121, 3785, WAN -      UDP Port:  3785

02/09/2014 11:52:08.080 - UDP packet dropped - 69.252.96.7, 53, WAN -      74.95.200.121, 3809, WAN -      UDP Port:  3809

02/09/2014 11:53:38.112 - UDP packet dropped - 69.252.96.6, 53, WAN -      74.95.200.121, 3923, WAN -      UDP Port:  3923

Problem solver

 • 

305 Messages

11 years ago

It's hard to determine what this is. You'd need to view the packet contents to see what's really going on. However, since you're a business class customer in the SF area and the node in the SF area is sending you traffic, it's not likely to be malicious.