Re: Problem with peering between Gblx and WCG?

Global Crossing and WCG in CA? We're hearing reports of intermittent latency across this link over the past three days. Thanks, ~ Rob Reeves IP Network Engineer Arbinet 703-456-4172 [EMAIL PROTECTED] ~ -- Josh

Re: 72.18.160.0/19 Please Check Filters - BOGON Filtering IP Space 72.0.0.0/8

: http://www.cymru.com/Bogons/ -- Josh Richards| Colocation Web Hosting Bandwidth Digital West Networks| +1 805 781-9378 / www.digitalwest.net San Luis Obispo, CA | AS14589 (Production) / AS29962 (RD) [EMAIL PROTECTED] | DWNI - Making Internet Business Better

Re: UDP port 4000 traffic: likely a new worm

here. details will be posted here: http://isc.sans.org/diary.html as I get them together. -- Josh Richards| Colocation Web Hosting Bandwidth Digital West Networks| +1 805 781-9378 / www.digitalwest.net San Luis Obispo, CA | AS14589 AS29962 [EMAIL PROTECTED] | DWNI

Re: UDP port 4000 traffic: likely a new worm

PST) -jr * Josh Richards [EMAIL PROTECTED] [20040320 11:10]: Confirmed. We had our first customer (colo) hit yesterday evening at 20:43 PST. Additionally, they experienced the hard drive corruption (which was added to the ISC diary entry within the last several hours). Traffic was 4000

Re: New worm / port 1434?

that could quite easily be forged or just another compromised box. We're seeing red to many networks all over the world though our network seems to have quieted down a bit. Sounds like a DDoS in the works. Anyone else able to corroborate/compare notes? -jr Josh Richards jrichard

Re: Level3 routing issues?

* Josh Richards [EMAIL PROTECTED] [20030124 23:25]: Same here. We first saw what looked like a DoS at about 09:00 PST. We're seeing strange stuff all over the place. Oops, meant to say 09:30 PST. -jr Josh Richards jrichard@{ geekresearch.com, cubicle.net, digitalwest.net } Geek

Re: New worm / port 1434?

Note, further analysis makes me believe that the ICMP we saw immediately beforehand was a coincidence and unrelated. The origin of the ICMP has been traced to a customer application. -jr * Josh Richards [EMAIL PROTECTED] [20030125 00:21]: A preliminary look at some of our NetFlow data shows

Re: virus or? (Those crazy ICG folk)

on the web in multiple places, and the addresses got harvested by spammers? Oh well, if not, I'm sure it will happen shortly. Joe -- Josh Richards jrichard@{ geekresearch.com, cubicle.net, digitalwest.net } Geek Research, LLC - Digital West Networks, Inc - San Luis Obispo, CA KG6CYK

Re: Telco cages?

@ RACKMAN WEST - 805-493-0494 -jr Josh Richards jrichard@{ geekresearch.com, cubicle.net, digitalwest.net } Geek Research, LLC - Digital West Networks, Inc - San Luis Obispo, CA KG6CYK - IP/Unix/telecom/knowledge/coffee/security/crypto/business/geek