[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Getting hit hard by CHINANET
- Subject: Getting hit hard by CHINANET
- From: rdobbins at arbor.net (Roland Dobbins)
- Date: Wed, 18 Mar 2015 09:16:11 +0700
- In-reply-to: <[email protected]>
- References: <CA+w+2f9vMAgFTTH=KVZANdQjTuRdyNH4yBVV9vhDRqGFFOCB_g@mail.gmail.com> <[email protected]>
On 18 Mar 2015, at 9:13, Roland Dobbins wrote:
> Also, asking your upstreams/peers to block traffic sourced from this
> IP to your netblock(s) on their networks.
It would also be a good idea to ensure that your systems which are being
targeted aren't themselves compromised, and being used by miscreants as
botnet C&Cs or whatever. A lot of 'inexplicable' attacks are actually
internecine disputes amongst miscreants, with compromised systems under
the control of miscreant A being targeted by miscreant B - and the
legitimate owner/operator of the hosts in question has no idea that
they're compromised.
-----------------------------------
Roland Dobbins <rdobbins at arbor.net>