[nsp-sec] Ping: Google/GMail

[Krista Hickey]

On Feb 28, 2008, John Fraizer wrote:

>Looks like 81.199.0.0/16 is eat up, huh?

To be fair to AS 12491 they wrote me yesterday saying they had a
complaint from their client at 81.199.224.200/29 and I can't find any
instance of abuse from that particular range, that said I'm kinda
scratching my head as to why a netblock allocated to Israel is
complaining about being unable to access our webmail when we've not
received a single complaint from a customer so I'm continuing to drop
the entire /16 until they respond to my concerns about the rest of their
block. Appreciate any info if any of you have seen evil from
81.199.224.200/29 in particular.

Krista
7992


-----Original Message-----
From: John Fraizer [mailto:john at op-sec.us] 
Sent: Thursday, February 28, 2008 4:54 PM
To: Krista Hickey
Cc: nsp-security at puck.nether.net
Subject: Re: [nsp-sec] Ping: Google/GMail

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Looks like 81.199.0.0/16 is eat up, huh?  Looking for flows in 
that /16, I found one to TCP 30988 of 81.199.101.185.  It 
answers on that port but, not sure what is running there.  No 
matter.  That /16 went bye bye for now on my network. :)

Seth, are you seeing similar?


John


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mandriva - http://enigmail.mozdev.org

iD8DBQFHxy15+16lRpJszIgRAgAyAJ0aEkhRND9QNmndKmnDIimjUcLCMwCff74f
bkyz4QK03tw/4qUuN8+zd9w=
=ov8T
-----END PGP SIGNATURE----- 
 
Do you really need to print this email? Help preserve our environment! Devez-vous vraiment imprimer ce courriel? Pensons a l'environnement!
__________________________________________________________
 
The information in this message, including in all attachments, is confidential or privileged. In the event you have received this message in error and are not the intended recipient, you are hereby advised that any use, copying or reproduction of this document is strictly forbidden. Please notify immediately the sender of this error and destroy this message, including its attachments, as the case may be.
 
L'information apparaissant dans ce message electronique et dans les documents qui y sont joints est de nature confidentielle ou privilegiee. Si ce message vous est parvenu par erreur et que vous n'en etes pas le destinataire vise, vous etes par les presentes avise que toute utilisation, copie ou distribution de ce message est strictement interdite. Vous etes donc prie d'en informer immediatement l'expediteur et de detruire ce message, ainsi que les documents qui y sont joints, le cas echeant.

__________________________________________________________