[nsp-sec] Twitter/LJ attack sources

Bill Woodcock woody at pch.net
Thu Aug 6 20:13:31 EDT 2009


    > Woody, I checked those ips against a set I had from an attack yesterday but only got three matches. Not very good correlation between two lists of nearly 2k attackers so I suspect it is totally unrelated.

Sorry, that was Facebook's list of inbound sources, before they realized 
it was a joe job, so they didn't know they wouldn't be seeing repeat 
traffic from them.  Just users clicking on links.  :-/

Sorry I've been offline and unable to reply earlier.

                                -Bill




More information about the nsp-security mailing list