This is part of a mail that I received
The IP 69.89.6.235 is attacking our server at 94.23.204.191 and 87.98.168.239.80 with UDP flood.
I have a newsletter scripts that I use to send newsletter to a lot of emails on my site (with IP 69.89.6.235). The email database that I have has a lot of mails that are not active but I still send to all of them. Could this be the possible cause of the UDP flood?
What are the other possible causes?
Best Answer
Mostly there is no "cause" for floods and the source IP address is likely to be faked. Make sure your system is not the source for UDP packets to these destination addresses, everything else is not your business.