nanog mailing list archives

Re: advise on network security report


From: Randy Bush <randy () psg com>
Date: Mon, 30 Oct 2006 07:44:22 -1000


 o being put on a major DNS black list (spamcop, spamhaus, ahbl etc.)
 o hosting malware or phishing sites, open proxies
 o sending LOTS of SPAM, virus
 o IRC abuse
 o Botnet C&C
 o hoping glue/fast flux
 o abusive, vulnerable web servers

Some of those are clearly ludicrous to count as "incidents" at all

oh?  which?

i can see some not being clearly incidents, but rather operational
states, e.g. a vulnerable server/service.  but ludicrous?

randy


Current thread: