nanog mailing list archives
Re: Infected list
From: Rob Thomas <robt () cymru com>
Date: Mon, 26 Dec 2005 12:04:29 -0600 (CST)
] To get action, lists of compromised (etc) systems NEED to include: ] Date/Time (preferably UTC), exact IP (as hostnames can have multiple ] A-records) and AS number. Agreed! We presumed it in this case, as the attack was "on-going." I really should have included the immediate timestamp, now that I think about it. Doh! -- Rob Thomas Team Cymru http://www.cymru.com/ ASSERT(coffee != empty);
Current thread:
- Infected list Barrett G. Lyon (Dec 25)
- Re: Infected list Rob Thomas (Dec 25)
- Re: Infected list Richard Cox (Dec 26)
- Re: Infected list Rob Thomas (Dec 26)
- RE: Infected list Scott Morris (Dec 26)
- Re: Infected list Florian Weimer (Dec 26)
- RE: Infected list Scott Morris (Dec 26)
- Re: Infected list Richard Cox (Dec 26)
- Re: Infected list Rob Thomas (Dec 25)