Kevin Gingerich [11:31 AM] Also, if we are accessing Airsonics behind a router via port forwarding we should disable the forwarding when we are done. I think this is the case with:
Compromised host used for an attack: 163.182.229.66
An IP address (163.182.229.66) under your control appears to have attacked one of our customers as part of a coordinated DDoS botnet. We manually reviewed the captures from this attack and do not believe that your IP address was spoofed, based on the limited number of distinct hosts attacking us, the identicality of many attacking IP addresses to ones we’ve seen in the past, and the non-random distribution of IP addresses. (edited)