[149376] in North American Network Operators' Group
Re: antisocial security
daemon@ATHENA.MIT.EDU (Christopher Morrow)
Thu Feb 2 12:21:34 2012
In-Reply-To: <20120202120814.DB34D1CC20E8@drugs.dv.isc.org>
Date: Thu, 2 Feb 2012 12:20:41 -0500
From: Christopher Morrow <morrowc.lists@gmail.com>
To: Mark Andrews <marka@isc.org>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Thu, Feb 2, 2012 at 7:08 AM, Mark Andrews <marka@isc.org> wrote:
>
> In message <f81ab141f9b5e72fe1e725230b2a7393@visp.net.lb>, Denys Fedorysh=
chenko
> =A0writes:
>> =A0On Thu, 02 Feb 2012 09:10:05 +0100, Jaap Akkerhuis wrote:
>> > and, i noticed the problem because i can not get to the web site at
>> > =A0 =A0 http://www.ssa.gov/ from tokyo.
>> >
>> > Lot's of .gov web sites are not available outside (at least what
>> > somebody thinks is outside) the US.
>> >
>> > =A0 =A0 jaap
>> =A0Just tested:
>> =A0Lebanon, Greece, Saudi Arabia, Netherlands, Germany - all is fine
>
> As is Australia. =A0I suspect it is just a "normal" snafu.
most likely this is a case of someone on the same /24 (or larger
supernet) where randy's machine lives at home 'hacked' (or port
scanned, or was used in a synflood or .... you get the point) one of
several US .gov assets :( 'eventually' that supernet should be removed
from filters.
-chris
weeee!