[nsp-sec] ACK: 50K Ips participating in attacks on twitter, LJ, etc

[Rodolfo Baader]

Hi Again,

Is there any pattern of the attack to search for in the proxy's logs?

R.

Rodolfo Baader wrote:
> ----------- nsp-security Confidential --------
> 
> Hi!
> 
> ACK for AR ASNs: 7303, 10318, 10481, 10834, 11315, 15078, 16732, 16814, 17401,
> 19037, 19889, 22080, 22927, 27747, 27787, 27790, 27813, 27955, 28066
> 
> Notifications were sent to the abuse/noc departments.
> 
> R.
> 
> Stephen Gill wrote:
>> ----------- nsp-security Confidential --------
>>
>> Hi team,
>>
>> Please see the following URL for a list of ~50K Ips believed to be
>> participating in the most recent attacks against twitter and the like.
>>
>>     https://www.cymru.com/nsp-sec/Owned/20090809_twitter.txt
>>
>> Timestamps in GMT.
>>
>> Use your nsp-sec credentials to access.
>>
>> Cheers,
>> -- steve
>>
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
>