[nsp-sec] Two Flashback C&Cs: HE, NTT, Internap, Limelight

[Bill Woodcock]

You guys are welcome to contact Scott directly, and I'll pass along the additional information as soon as he gets it to me.

                                -Bill


Begin forwarded message:

> From: Scott Boyd <scott_boyd at apple.com>
> Date: April 18, 2012 6:32:17 PM PDT
> To: Bill Woodcock <woody at pch.net>
> Cc: Erik Neuenschwander <erikn at apple.com>, Scott Boyd <scott_t_boyd at apple.com>
> Subject: Re: Apple - NSPsec coordination on Flashback
> 
> Thanks, Bill.  I need to get you filtering particulars (src port, dst port, packet sizes, other distinguishing features), but wanted to get you two outstanding addresses of significance to start.
> 
> Best,
> scott
> 
> asdfuh982hdodjc.com
> AS      | IP               | AS Name
> 33626   | 208.73.210.29    | OVERSEE-DOT-NET - Oversee.net
> 
> PEER_AS | IP               | AS Name
> 2914    | 208.73.210.29    | NTT-COMMUNICATIONS-2914 - NTT America, Inc.
> 10912   | 208.73.210.29    | INTERNAP-BLK - Internap Network Services Corporation
> 22822   | 208.73.210.29    | LLNW-AS Limelight Networks, INC. proxy AS object
> 
> 
> rfffnahfiywyd.net
> vxvhwcixcxqxd.net
> AS      | IP               | AS Name
> 6939    | 74.207.249.7     | HURRICANE - Hurricane Electric, Inc.
> 
> PEER_AS | IP               | AS Name
> 1299    | 74.207.249.7     | TELIANET TeliaNet Global Network
> 2381    | 74.207.249.7     | WISCNET1-AS - WiscNet
> 3549    | 74.207.249.7     | GBLX Global Crossing Ltd.
> 4436    | 74.207.249.7     | AS-NLAYER - nLayer Communications, Inc.
> 4565    | 74.207.249.7     | MEGAPATH2-US - MegaPath Networks Inc.
> 10310   | 74.207.249.7     | YAHOO-1 - Yahoo!
> 11164   | 74.207.249.7     | INTERNET2-TRANSITRAIL-CPS - National LambdaRail, LLC




-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 881 bytes
Desc: This is a digitally signed message part
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20120418/b90cab5c/attachment-0001.sig>