[99550] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: DDoS Question

daemon@ATHENA.MIT.EDU (Paul Ferguson)
Fri Sep 28 00:08:51 2007

From: "Paul Ferguson" <fergdawg@netzero.net>
Date: Fri, 28 Sep 2007 04:05:57 GMT
To: sean@donelan.com
Cc: nanog@merit.edu
Errors-To: owner-nanog@merit.edu


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Sean Donelan <sean@donelan.com> wrote:

>See all the previous mail threads about ISPs not doing anything :-)
>
>Stop the bots on your networks; work with people to stop the bots
>on other networks; work with law enforcement to put the criminals
>in prison.

I don't want to pour gasoline on a burning fire (well, okay -- maybe
I do), but this issue is really out of hand.

I mean, the top ASN-originating "offender" pumped out somewhere
in the neighborhood of 2.27 billion (yes, "Billion", with a "B")
spam messages in the past 24 hours (from our perspective):

https://nssg.trendmicro.com/nrs/reports/rank.php?page=3D1

=2E..and that's just the figure for one ASN with a bot
problem. And since virtually _all_ spam these days is
botnet-generated...

=2E..it gets worse, but I won't get into it here.

It's a very frustrating problem.

Cheers,

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFG/H2fq1pz9mNUZTMRAs+4AKCTVcHwv3GwpSC9f97wwlu1dtCH4ACgvCkg
HBzR70yuEJTtidFmF5NmV7Q=3D
=3DOnBX
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/



home help back first fref pref prev next nref lref last post