[nsp-sec] Twitter under attack?

[Sidney Faber]

I see some spam coming in from these addrs, but it looks like many have already been blacklisted.  Also some inbound HTTP & occasional high port <-> high port & udp traffic.  I'm guessing these are typical dirty/bot'd machines used to spam the URLs?


______________
Sid Faber, Member of the Technical Staff
CERT Software Engineering Institute
Carnegie Mellon University
sfaber at cert.org


> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-
> bounces at puck.nether.net] On Behalf Of Bill Woodcock
> Sent: Thursday, August 06, 2009 1:56 PM
> To: Chris Morrow
> Cc: nsp-security at puck.nether.net
> Subject: Re: [nsp-sec] Twitter under attack?
> 
> ----------- nsp-security Confidential --------
> 
>       On Thu, 6 Aug 2009, Chris Morrow wrote:
>     > is it pretty clear at this time that this is related to the
>     > georgian/russian events? Should we be reporting that sort of 'cause' up
>     > some?
> 
> I've been coordinating with the National Security Council for past hour.
> 
> Barry Pavel has been heading this issue up on their side for the last ten
> days or so.  They were pretty sure this was coming, but not sure of the
> exact targets.
> 
>                                 -Bill
> 
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security
> counter-measures.
> _______________________________________________