Security Incidents mailing list archives

Re: scan log and subsequent response from the host's ISP


From: goemon () SASAMI ANIME NET (Dan Hollis)
Date: Fri, 7 Jul 2000 15:11:24 -0700


On Fri, 7 Jul 2000, Michal Nazarewicz wrote:
Wednesday, Dan Hollis wrote:
DH>Hm time to blackhole route 212.216.184.0 - 212.216.191.255? Their response
DH>definitely makes them rogue.
I did it already; I think, it's time to blackhole also some of .kr and .br
networks...

At one time I might have included .pl in that list :-) Thankfully someone
seems to have taken a clue-by-four to the networks there. Someone hired
.it and .gr mafia to have a chat with .pl network admins? :-)

As for .kr / .br I think its mainly the language barriers causing
problems. Hopefully they will get clued in eventually. This is changing,
slowly, for .jp and .hk thanks to the herculean efforts of some of the
asia-pacific guys.

I think .cn is the only truly rogue TLD right now. Even .ru seems to be
coming around :-)

-Dan


Current thread: