North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Fwd: Re: Code Red variants

  • From: Larry Rosenman
  • Date: Sun Aug 05 11:41:51 2001

* Marius Strom <[email protected]> [010805 10:38]:
> 
> Odd thing: from a Sprint connected network, he seess the most attempts
> from Sprint's Class A.
> 
> On my cable-modem connected box through Cox Internet, I see 248 out of
> 256 attempts coming from *.cox-internet.com.
> 
> Does the new variant perhaps try to "stick to it's own domain"?  I do
> see some non-localdomain stuff as well, so it's not 100% definite, and I
> can't say whether or not the providers are proactively filtering inbound
> to prevent other providers from getting in.
> 
According to another post, it wants to stay in the same /8, /16, and
/24. 



-- 
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 972-414-9812                 E-Mail: [email protected]
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749