[55975] in North American Network Operators' Group
Re: scripts to map IP to AS?
daemon@ATHENA.MIT.EDU (Hank Nussbacher)
Thu Feb 20 09:31:26 2003
Date: Thu, 20 Feb 2003 16:29:24 +0200
To: Alif The Terrible <measl@mfn.org>,
William Allen Simpson <wsimpson@greendragon.com>
From: Hank Nussbacher <hank@att.net.il>
Cc: nanog@merit.edu
In-Reply-To: <Pine.BSF.4.21.0302200804130.20446-100000@greeves.mfn.org>
Errors-To: owner-nanog-outgoing@merit.edu
At 08:07 AM 20-02-03 -0600, Alif The Terrible wrote:
>On Thu, 20 Feb 2003, William Allen Simpson wrote:
>
> > Anybody have a pointer to scripts to map IP to AS?
>
>Google is your friend ;-)
>
>
> > There are still 10K-20K hosts spewing M$SQL slammer/sapphire packets,
> > and I'd like to start blocking routing to those irresponsible AS's
> > that haven't blocked their miscreant customers.
>
>Then you'd better reach over to all of your upstream routers and just pull
>the plug, since you are likely to see Sapphire packets from here on in, on a
>regular basis.
Better is to do the whois lookup and send pre-formatted e-mail about the
infected server as people did after Code-Red.
-Hank
>Of course, if blocking "irresponsible isp's" is really your agenda, you'd
>better start blocking those with Code Red/Nimda, Slapper, etc...
>
>Enjoy your private corner of the world, devoid of connectivity...
>
>
>--
>Yours,
>J.A. Terranson
>sysadmin@mfn.org
