nanog mailing list archives
Re: Arbor Networks DoS defense product
From: Rob Thomas <robt () cymru com>
Date: Wed, 15 May 2002 15:26:15 -0500 (CDT)
Hi, Pete. ] With the number of always-on broadband residential and ] small-business customers, are education networks still the The broadband ranges are now quite popular with the miscreants. Several of the bots I've recovered conduct targeted scans of the broadband prefixes. While scanning the entire IPv4 address space - including the bogons - does yield a lot of hax0red hosts, it also produces a lot of noise. FYI, the miscreants also _avoid_ certain netblocks in which, they believe, honeypots and other things reside. When scanning for easily hacked routers, the miscreants target the ranges they believe contain "mad fast routers," e.g. routers with > T1 connectivity. In the case of both hosts and routers, it is increasingly common for the miscreants to test the bandwidth capabilities of the device. The sluggish are left unused by many crews (or traded in the very active underground economy). Thanks, Rob. -- Rob Thomas http://www.cymru.com/~robt ASSERT(coffee != empty);
Current thread:
- Arbor Networks DoS defense product Sean Donelan (May 14)
- Re: Arbor Networks DoS defense product Pete Kruckenberg (May 14)
- Re: Arbor Networks DoS defense product Rubens Kuhl Jr. (May 14)
- Re: Arbor Networks DoS defense product Pete Kruckenberg (May 14)
- Re: Arbor Networks DoS defense product Richard A Steenbergen (May 15)
- Re: Arbor Networks DoS defense product Pete Kruckenberg (May 15)
- Re: Arbor Networks DoS defense product Rob Thomas (May 15)
- Re: Arbor Networks DoS defense product Dan Hollis (May 15)
- Re: Arbor Networks DoS defense product Rob Thomas (May 15)
- Re: Arbor Networks DoS defense product Dan Hollis (May 15)
- Re: Arbor Networks DoS defense product Rob Thomas (May 15)
- Re: Arbor Networks DoS defense product Dan Hollis (May 15)
- Re: Arbor Networks DoS defense product Rafi Sadowsky (May 15)
- Re: Arbor Networks DoS defense product Rubens Kuhl Jr. (May 14)
- Re: Arbor Networks DoS defense product Pete Kruckenberg (May 14)
- Re: Arbor Networks DoS defense product Rob Thomas (May 15)
- <Possible follow-ups>
- RE: Arbor Networks DoS defense product Cheung, Rick (May 15)
- Re: Arbor Networks DoS defense product Dan Hollis (May 15)