[nsp-sec] Daily Reports Summary for week ending 2008-07-28

Sean Donelan sean at donelan.com
Mon Jul 28 22:39:29 EDT 2008


There may be some measurement error, but could we (i.e. not me, but
the various ISPs) stomp out the last few Mydoom infections?

> Mydoom            12  - 14.3%     9      0        0            14     9

https://www.cymru.com/nsp-sec/dailyreports/mydoom.html

ASN   HITS   ASN Name
  7132   4   SBIS-AS - AT&T Internet Services
  9829   3   BSNL-NIB National Internet Backbone
  33287   2   DNEO-OSP4 - Comcast Cable Communications, Inc.
  16586   2   CLEARWIRE - Clearwire, LLC
  33652   2   DNEO-OSP7 - Comcast Cable Communications, Inc.
  15557   1   LDCOMNET NEUF CEGETEL (formerly LDCOM NETWORKS)
  4589   1   EASYNET Easynet Group Plc
  33667   1   DNEO-OSP7 - Comcast Cable Communications, Inc.
  2516   1   KDDI KDDI CORPORATION

I focused Mydoom because the last few ASNs are mix of US, European
and Asia ISPs which avoids the usual regional fingerpointing. I believe 
they all have functional (if overworked) abuse desks.  I know it would 
only be symbolic, but wouldn't it be great if we could collectively say 
(at least to our bosses) that working together we had a minor victory?

Minor victories are important, sometimes it doesn't feel like we're
making progress. Then maybe we can stomp out the next one and so on with 
the some of the bigger ones.




More information about the nsp-security mailing list