Re: Publishing Nimda Logs

From: Laurence Brockman (laurenceat_private)
Date: Tue May 07 2002 - 20:55:44 PDT

Next message: amonotod: "RE: Publishing Nimda Logs"

Previous message: Pavel Lozhkin: "Re: Publishing Nimda Logs"
In reply to: ash: "Re: Publishing Nimda Logs"
Next in thread: ash: "Re: Publishing Nimda Logs"
Reply: ash: "Re: Publishing Nimda Logs"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

24.x isn't just Road Runner, it's most cable companies. It's Shaw (In
Canada), Rogers (AT&T), Road runner, etc, etc. These blocks were given to
lots of cable ISP's when @Home was big, so sending logs into Road runner for
any 24.x.x.x IP is useless in most cases (As the majority doesn't belong to
them).

Laurence

----- Original Message -----
From: "ash" <ashcrowat_private>
To: <vuln-devat_private>
Sent: Tuesday, May 07, 2002 5:01 PM
Subject: Re: Publishing Nimda Logs


> I get lots of attacks in my apache logs from 24.x networks which I
> belive is Road Runner. Unfortunatly, RR doesn't seem to care. I started
> to publish the  logs to my site, http://nwsupplies.com, but there was
> just to many of them. I'll probably just post 100-200 attacks from the
> last week randomly.
>
> Ash
> ---
> Darkfire Secure Linux - http://www.gnulinux.net
>
>
>

Next message: amonotod: "RE: Publishing Nimda Logs"
Previous message: Pavel Lozhkin: "Re: Publishing Nimda Logs"
In reply to: ash: "Re: Publishing Nimda Logs"
Next in thread: ash: "Re: Publishing Nimda Logs"
Reply: ash: "Re: Publishing Nimda Logs"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed May 08 2002 - 13:18:48 PDT