[nsp-sec] amazon blocking

Shelton, Steve sshelton at Cogentco.com
Tue Jun 10 10:41:42 EDT 2008


Dave,

The following two appear to be false positives, still working on the
others however.

174     | 38.96.176.66     | COGENT Cogent/PSI
174     | 38.99.107.162    | COGENT Cogent/PSI

In the case of 38.96.176.66/32, access logs show the following for
6/9/2008.

Hourly activity for www.amazon.com
6/9/2008
Hour	Pages						
08:00 AM	7					
09:00 AM	4					
10:00 AM	49					
11:00 AM	5					
12:00 PM	50					
01:00 PM	55					
02:00 PM	8					
03:00 PM	26					
04:00 PM	11

Are you able to provide any additional information, logging or possibly
validate if you are still seeing [hostile] traffic from either prefix? 

Best regards,

Steve Shelton
Network Security Engineer
Cogent Communications

-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Dave Burke
Sent: Monday, June 09, 2008 9:20 PM
To: NSP nsp-security
Subject: [nsp-sec] amazon blocking





More information about the nsp-security mailing list