[nsp-sec] Twitter/LJ attack sources

[Smith, Donald]

Woody, I checked those ips against a set I had from an attack yesterday but only got three matches. Not very good correlation between two lists of nearly 2k attackers so I suspect it is totally unrelated.


(coffee != sleep) & (!coffee == sleep)
Donald.Smith at qwest.com gcia   

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net 
> [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of 
> Nicholas Ianelli
> Sent: Thursday, August 06, 2009 12:32 PM
> To: Bill Woodcock
> Cc: nsp-security at puck.nether.net
> Subject: Re: [nsp-sec] Twitter/LJ attack sources
> 
> ----------- nsp-security Confidential --------
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> > http://www.pastebin.org/6976
> > 
> >                                 -Bill
> 
> When you say "sources" what do you actually mean by that? Are 
> these IPs
> based on spam messages being sent or something else?
> 
> Thanks!
> Nick
> 
> - --
> Nicholas Ianelli: NeuStar, Inc.
> Security Operations
> 
> 46000 Center Oak Plaza Sterling, VA 20166
> +1 571.434.4691 - http://www.neustar.biz
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (MingW32)
> 
> iEYEARECAAYFAkp7IZEACgkQi10dJIBjZIAcVgCg2YUQMmjc1PlMKuibb5b+1CWF
> MRQAoIz7dHXjH78tAbUMk0QR9l0XXlrF
> =SV/Q
> -----END PGP SIGNATURE-----
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the 
> nsp-security
> community. Confidentiality is essential for effective 
> Internet security counter-measures.
> _______________________________________________
> 
>