Re: BO, netbus and so on...

[Robert Graham <robert_david_graham () yahoo com>]

FYI, my own statistics are showing that about 80% of BO traffic goes to port 31337, 5% goes to
port 53, and 15% goes to other ports. This other 20% is being missed by firewalls and Back Officer
Friendly type products.

Rob.

--- "S. Jonah Pressman" <jonah () istar ca> wrote:
> From my statistics and work in the area, it seems that BO is the
> favourite of North American kids whereas NetBus is still the favourite
> of the Europeans - and, yes, the numbers and inferred ratios is very
> much in line with my research.
> Marcelo M. Sosa Lugones wrote:
> > These are some statics of NetBus/BO attacks from one of my border routers:
> > Extended IP access list incoming-1
> >     deny tcp any any eq 12345 (38540 matches)
> >     deny udp any any eq 31337 (125587 matches)
> >     deny ip 10.0.0.0 0.255.255.255 any (3849 matches)
> >     deny ip 172.16.0.0 0.15.255.255 any (2567 matches)
> >     deny ip 192.168.0.0 0.0.255.255 any (10138 matches)
> >     permit ip any any (93917505 matches)


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com