Ddos fra microsoft?

[wtf1337]

Hei og god dag.
Jeg har en dedicated server, og i dag (kl 17-18) Så fikk jeg store mengder trafikk fra diverse ip-adresser.







Så ser jeg og rapporten fra Router: juniper1.ffm.hetzner.de

Direction IN
> Internal xxxxxxx
> Threshold PacketsDiff 70.000 packets/s, Diff: 162.776 packets/s
> Sum 48.901.000 packets/300s (163.003 packets/s), 59 flows/300s (0 flows/s), 47,780 GByte/300s (1.304 MBit/s)
> External 168.62.206.168, 20.000.000 packets/300s (66.666 packets/s), 4 flows/300s (0 flows/s), 19,595 GByte/300s (535 MBit/s)
> External 168.62.10.0, 10.573.000 packets/300s (35.243 packets/s), 4 flows/300s (0 flows/s), 10,359 GByte/300s (282 MBit/s)
> External 168.61.27.113, 9.129.000 packets/300s (30.430 packets/s), 4 flows/300s (0 flows/s), 8,944 GByte/300s (244 MBit/s)
> External 168.61.0.237, 4.919.000 packets/300s (16.396 packets/s), 4 flows/300s (0 flows/s), 4,819 GByte/300s (131 MBit/s)
> External 168.62.6.142, 4.134.000 packets/300s (13.780 packets/s), 4 flows/300s (0 flows/s), 4,050 GByte/300s (110 MBit/s)
> External 93.217.71.99, 26.000 packets/300s (86 packets/s), 4 flows/300s (0 flows/s), 0,002 GByte/300s (0 MBit/s)
> External 93.201.220.227, 23.000 packets/300s (76 packets/s), 5 flows/300s (0 flows/s), 0,002 GByte/300s (0 MBit/s)
> External 84.129.77.28, 20.000 packets/300s (66 packets/s), 5 flows/300s (0 flows/s), 0,002 GByte/300s (0 MBit/s)
> External 93.216.115.127, 19.000 packets/300s (63 packets/s), 5 flows/300s (0 flows/s), 0,002 GByte/300s (0 MBit/s)
> External 93.218.255.13, 19.000 packets/300s (63 packets/s), 5 flows/300s (0 flows/s), 0,002 GByte/300s (0 MBit/s)
> External 217.95.179.246, 16.000 packets/300s (53 packets/s), 5 flows/300s (0 flows/s), 0,001 GByte/300s (0 MBit/s)
> External 84.187.159.88, 12.000 packets/300s (40 packets/s), 4 flows/300s (0 flows/s), 0,001 GByte/300s (0 MBit/s)
> External 91.62.163.54, 7.000 packets/300s (23 packets/s), 4 flows/300s (0 flows/s), 0,001 GByte/300s (0 MBit/s)
> External 87.175.156.86, 3.000 packets/300s (10 packets/s), 1 flows/300s (0 flows/s), 0,000 GByte/300s (0 MBit/s)
> External 176.52.55.119, 1.000 packets/300s (3 packets/s), 1 flows/300s (0 flows/s), 0,000 GByte/300s (0 MBit/s)

Etter litt whois så ser det ut som det er Microsoft som eier de fleste adressene.
http://whois.net/ip-.../168.62.206.168
Noen grunn til at de skulle gjøre slikt?

Endret 17. mars 2014 av wtf1337

[wtf1337]

Update::

Sendt mail til "technical contact" til microsoft, for se om de svarer.