New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
high volume of attack from microsoft
silicomnet
Member
in General
Hello,
Have you detected an increase in attacks originating from microsoft.com?
Canada, India, Sweden
generally from the IP range 20.x.x.x/8
Comments
yes, so i disabled windows update
Sarcasm doesn't help. I use MacOS, I never used Windows. I'm referring to attacks on servers, not your personal computer.
Microsoft.com include azure, example range of ip 20.104.0.0/16
AS8075 Microsoft Corporation
you mean from that ip range? it's prob just automated bots. nothing to deal with other then blocking the block range outright
Increase? Not sure, always been like this TBH.
Canada, India, Sweden
You’re probably looking at traffic that appears to come from microsoft.com / 20.0.0.0/8, but in most cases this is not “Microsoft attacking VPS providers” in the traditional sense.
Semi-relatedly, seems that the spam volume from them is up quite a lot recently: https://www.spamhaus.org/reputation-statistics/networks/spam/
+171% in past month.