Vulnerability Development mailing list archives

Re: Publishing Nimda Logs


From: ash <ashcrow () phreaker net>
Date: Wed, 08 May 2002 00:59:05 -0400

Ah, thanks for clearing that up. Is there a central place that says who owns what IP range blocks so Ican further investigate where attacks come from (besides whoising each address)?

Ash

Laurence Brockman wrote:

24.x isn't just Road Runner, it's most cable companies. It's Shaw (In
Canada), Rogers (AT&T), Road runner, etc, etc. These blocks were given to
lots of cable ISP's when @Home was big, so sending logs into Road runner for
any 24.x.x.x IP is useless in most cases (As the majority doesn't belong to
them).

Laurence






Current thread: