[nsp-sec] AS27595 (Intercage) gone - implications..

[Dave Mitchell]

As last night at 20:00 PST I saw a nice spike in HTTP traffic and about
23:50 PST it dropped off and small amounts of dns traffic started
trickling in again.

Top 4 speakers:

216.255.190.136-custblock.intercage.com (216.255.190.136/32)	
50.56Kbps	1.41 Mbps	1.46 Mbps	

216.255.190.134-custblock.intercage.com (216.255.190.134/32)
44.13 Kbps	1.24 Mbps	1.28 Mbps	

216.255.190.137-custblock.intercage.com (216.255.190.137/32)
24.33 Kbps	736.00 Kbps	760.33 Kbps	

216.255.183.221-custblock.intercage.com (216.255.183.221/32)
347.00 Kbps	41.00 Kbps	388.00 Kbps


I've attached the .png to this email.

-dave

On Mon, Sep 22, 2008 at 11:36:37PM -0400, Jared Mauch wrote:
> ----------- nsp-security Confidential --------
> 
> On Mon, Sep 22, 2008 at 04:12:33PM +0000, Chris Morrow wrote:
> > ----------- nsp-security Confidential --------
> > things may have to move to where more surgical strikes are necessary :(
> 
> 	Depending on where it goes, it may be valuable to
> build more data.
> 
> >>> -----Original Message-----
> >>> From: nsp-security-bounces at puck.nether.net
> >>> [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of
> >>> Huopio Kauto
> >>> Sent: Monday, September 22, 2008 6:35 AM
> >>> To: NSP nsp-security
> >>> Subject: [nsp-sec] AS27595 (Intercage) gone - implications..
> >>>
> >>> ----------- nsp-security Confidential --------
> >>>
> >>> Now that AS27595 has no routing, there could be some
> >>> interesting effects to the end users. Those who have been
> >
> > as an odd aside, I had a pretty severe drop in inbound spam to my  
> > collection system yesterday... I wonder if that trend will continue or if 
> > it was related at all to 27595 going away. (which I doubt since it was  
> > over most of the day...)
> 
> 	Now that it's "back" did your rate increase?
> 
> 	Perhaps others are geting 'scared' of the implications
> that the spam/malware heat is getting turned up.
> 
> 	either way, will be interesting to watch.
> 
> 	- jared
> 
> -- 
> Jared Mauch | I work for but do not always represent NTT America
> list admin  | +1 313 506 4307 * send list policy questions to 
>             | nsp-security-owner at puck.nether.net
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
-------------- next part --------------
A non-text attachment was scrubbed...
Name: grapha15cfd8a0ba639277f10518bec48a628.png
Type: image/png
Size: 4913 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20080923/8645bfe3/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20080923/8645bfe3/attachment-0001.sig>