[55258] in North American Network Operators' Group
Re: Tracing where it started
daemon@ATHENA.MIT.EDU (Alex Rubenstein)
Sun Jan 26 00:10:20 2003
Date: Sun, 26 Jan 2003 00:09:33 -0500 (Eastern Standard Time)
From: Alex Rubenstein <alex@nac.net>
To: Johannes Ullrich <jullrich@euclidian.com>
Cc: Travis Pugh <tdp@discombobulated.net>,
"nanog@merit.edu" <nanog@merit.edu>
In-Reply-To: <20030125190505.5c1f1629.jullrich@euclidian.com>
Errors-To: owner-nanog-outgoing@merit.edu
> +-----------------+
> | 216.069.032.086 | Kentucky Community and Technical College System
> | 066.223.041.231 | Interland
> | 216.066.011.120 | Hurricane Electric
> | 216.098.178.081 | V-Span, Inc.
> +-----------------+
HE.net seems to be a reoccuring theme. (I speak to evil of them --
actually, there are some good people over there).
However, it appears that one of the 'root' boxes of this attack was at HE.
This is the third or fourth time I've seen theit netblocks mentioned as
the source of some of the first packets.
-- Alex Rubenstein, AR97, K2AHR, alex@nac.net, latency, Al Reuben --
-- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --
