Vulnerability Development mailing list archives

Re: Publishing Nimda Logs


From: "Laurence Brockman" <laurence () fluxinc com>
Date: Tue, 7 May 2002 21:55:44 -0600

24.x isn't just Road Runner, it's most cable companies. It's Shaw (In
Canada), Rogers (AT&T), Road runner, etc, etc. These blocks were given to
lots of cable ISP's when @Home was big, so sending logs into Road runner for
any 24.x.x.x IP is useless in most cases (As the majority doesn't belong to
them).

Laurence

----- Original Message -----
From: "ash" <ashcrow () phreaker net>
To: <vuln-dev () securityfocus com>
Sent: Tuesday, May 07, 2002 5:01 PM
Subject: Re: Publishing Nimda Logs


I get lots of attacks in my apache logs from 24.x networks which I
belive is Road Runner. Unfortunatly, RR doesn't seem to care. I started
to publish the  logs to my site, http://nwsupplies.com, but there was
just to many of them. I'll probably just post 100-200 attacks from the
last week randomly.

Ash
---
Darkfire Secure Linux - http://www.gnulinux.net





Current thread: