Re: sobig effects - batten down the hatches

From: Eric L. Howard (elh_at_outreachnetworks.com)
Date: 08/23/03

  • Next message: pasirris_at_prpg-tc.org.sg: "Auto Reply Messages"
    Date: Fri, 22 Aug 2003 19:06:51 -0400
    To: freebsd-isp@freebsd.org
    
    

    At a certain time, now past [Aug.23.2003-07:25:47AM +1000], rowan@sensation.net.au spake thusly:
    > On Fri, 22 Aug 2003, Alex Soares de Moura wrote:
    >
    > > Yes, we've applied ACLs to some destinations known it would try
    > > to access and in the programmed time, we started to get hits on the
    > > ACLs:
    > >
    > > deny ip any host 67.73.21.6 log (558 matches)
    > > deny ip any host 68.38.159.161 log (470 matches)
    [....]
    >
    > Hi Alex:
    >
    > Where did you get this list of IPs? How long ago did you see the accesses
    > start? I've been hunting around google and news sites, but so far I can't
    > find any articles that say anything more than "it will happen" ...
    >
    > Cheers.

    http://xforce.iss.net/xforce/alerts/id/151 scroll down to the bottom.

    The list of IPs hit the NANOG mailing list a little while ago and a lot of
    networks have null-routed the IPs already.

           ~elh

    -- 
    Eric L. Howard           e l h @ o u t r e a c h n e t w o r k s . c o m
    ------------------------------------------------------------------------
    www.OutreachNetworks.com                                    313.297.9900
    ------------------------------------------------------------------------
    JabberID: elh@jabber.org                 Advocate of the Theocratic Rule
    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
    

  • Next message: pasirris_at_prpg-tc.org.sg: "Auto Reply Messages"

    Relevant Pages

    • [Full-Disclosure] Re: More info on blocking the Bagle worm
      ... On Jan 20th 2004, Anders Henke wrote: ... > A few notes on the impact of beagle from an ISP's point of view - our ... 151599 different IPs, 15282351 hits ...
      (Full-Disclosure)
    • Re: If Tek hit like last season..
      ... One number I like is hits per inning. ... But Lil Manny is also terrific at ... particular stat. ... Just for good measure, I added the all time list (minimum 1,000 IPs, ...
      (alt.sports.baseball.bos-redsox)
    • Re: NIMDA has a built in timer? No hits lately
      ... No hits lately ... I run a TINY setup - grand total of 3 IPs on 64.* and I'm getting ... 4,400 cmd.exe and 4,300 multiple decode IIS probes and the rate is ...
      (Incidents)