1 Nov
2019
1 Nov
'19
9:29 a.m.
On 1 Nov 2019, at 08:47, ed-bitfolk(a)s5h.net wrote:
The SYN ACK is a response to a SYN packet. This would
signify that the
three machines are responding to SYN requests from 185.90.0.0/16. If no
ACK returns from the SYN ACK, then the initial SYN was probably spoofed.
Yes, I’m aware of that. These are definitely spoofed SYNs.
Mike