[pchelpers] Re: Bad IP addresses
- From: John Durham <john.modec@xxxxxxxxxx>
- To: pchelpers@xxxxxxxxxxxxx
- Date: Thu, 27 Oct 2005 16:18:41 +0000
Thanks for the links. Comments below:
Scott McNay wrote:
>Hi John,
>
>Wednesday, October 26, 2005, 2:27:22 PM, you wrote:
>
>JD> Since my guest book was set up, the system has been keeping a log of
>JD> attempts by off site scripts to misuse it. The list is growing into what
>JD> may be an interesting map of the 'bot nets' distributed all over the world.
>
>JD> These are infected PCs which attempt to carry out nefarious activities,
>JD> often without the knowledge of their owners. I was just wondering- could
>JD> this be the basis of an 'Is your machine infected with a bot?' resource?
>
>JD> I'm curious what your views are on this, since the list continues to grow.
>
>I hear that the large internet companies with large empty blocks of IP
>addresses monitor various kinds of botnets.
>
>Ok, found some links:
>http://72.14.203.104/search?q=cache:XlcQy_KI14gJ:www.cheswick.com/ches/ppt/ipv6-myrtle2005.ppt&hl=en&lr=lang_en
>http://www.wormblog.com/witty/ (look for "Outwitting the Witty Worm")
>This guy seems to be writing pages in huge fonts. Without reading all 57
>pages, it looks like some sort of internet history. It's hard to tell how
>relevant it is to the topic.
>
>
>More links:
>http://www.google.com/search?q=%22network+telescope%22+-stars+-skyscan+-focus+-astronomy
>
>
>Here the ideas of a Network Telescope is described, for looking at network
>activity on a large scale to spot worm and DDOS attacks. Maybe my view with a
>single log file is the microscopic view. In this case, I know for sure certain
>scripts from specific IPs have attempted to exploit my system to pland ads on
>the guest book (and failed). I can't be sure which is more useful.
>
>
>Of course, if some ISPs would monitor their customers better, this
>would be less of a problem.
>
>
>
Agreed. There are some sneaky customers around.
--
Regards, John Durham <http://modecideas.com/contact.html?sig>
ICQ number 112663246
Fax/Phone 64 4 5286786
Award winning web site at http://modecideas.com?sig
PC-HELPERS list subscribe/unsub at http://modecideas.com/index.html?sig
Good advice is like good paint- it only works if applied.
--
-------list-services-below-----------
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at http://www.freelists.org/cgi-bin/lsg2.cgi
List archives at http://www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Latest news live feeds at http://modecideas.com/indexhomenews.htm?sig
Good advice is like good paint- it only works if applied.
- Follow-Ups:
- [pchelpers] not writing into quotes
- From: Ekhart GEORGI (last name last)
- References:
- [pchelpers] Bad IP addresses
- From: John Durham
- [pchelpers] Re: Bad IP addresses
- From: Scott McNay
Other related posts:
- » [pchelpers] Bad IP addresses
- » [pchelpers] Re: Bad IP addresses
- » [pchelpers] Re: Bad IP addresses
- [pchelpers] not writing into quotes
- From: Ekhart GEORGI (last name last)
- [pchelpers] Bad IP addresses
- From: John Durham
- [pchelpers] Re: Bad IP addresses
- From: Scott McNay