[87570] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Infected list

daemon@ATHENA.MIT.EDU (Rob Thomas)
Mon Dec 26 13:05:23 2005

Date: Mon, 26 Dec 2005 12:04:29 -0600 (CST)
From: Rob Thomas <robt@cymru.com>
To: NANOG <nanog@merit.edu>
In-Reply-To: <A.1Eqw4N-0006eg-Qa@ns8.spamhaus.org>
Errors-To: owner-nanog@merit.edu


] To get action, lists of compromised (etc) systems NEED to include:
] Date/Time (preferably UTC), exact IP (as hostnames can have multiple
] A-records) and AS number.

Agreed!  We presumed it in this case, as the attack was "on-going."
I really should have included the immediate timestamp, now that I
think about it.  Doh!

-- 
Rob Thomas
Team Cymru
http://www.cymru.com/
ASSERT(coffee != empty);


home help back first fref pref prev next nref lref last post