Abuse from Vodaphone AS30722

Mailman List Mirror (Read Only)
1

Anyone from Vodaphone on list?

We are experiencing a massive DDoS from three Vodafone /16’s. The DDoS is spread throughout the entire range.

2.38.0.0/16
2.39.0.0/16
188.216.0.0/16

We’ve had to block the entire ranges just to stay online.

Thanks
John

2

You say *Distributed*, from that I would expect that this traffic is
ingressing at multiple locations in your network?

I'd be surprised if Vodafone's domestic Italian network would spread
traffic to your ASN over multiple paths, and so if it is coming in from
multiple ingress points, you're probably looking at spoofed-source traffic.