sobig effects - batten down the hatches

[Rowan Crowe]

On Fri, 22 Aug 2003, Alex Soares de Moura wrote:

> Yes, we've applied ACLs to some destinations known it would try
> to access and in the programmed time, we started to get hits on the
> ACLs:
> 
>     deny ip any host 67.73.21.6 log (558 matches)
>     deny ip any host 68.38.159.161 log (470 matches)
>     deny ip any host 67.9.241.67 log (593 matches)
>     deny ip any host 66.131.207.81 log (460 matches)
>     deny ip any host 65.177.240.194 log (623 matches)
>     deny ip any host 65.93.81.59 log (441 matches)
>     deny ip any host 65.95.193.138 log (622 matches)
>     deny ip any host 65.92.186.145 log (478 matches)
>     deny ip any host 63.250.82.87 log (644 matches)
>     deny ip any host 65.92.80.218 log (459 matches)
>     deny ip any host 61.38.187.59 log (621 matches)
>     deny ip any host 24.210.182.156 log (498 matches)
>     deny ip any host 24.202.91.43 log (630 matches)
>     deny ip any host 24.206.75.137 log (490 matches)
>     deny ip any host 24.197.143.132 log (664 matches)
>     deny ip any host 12.158.102.205 log (488 matches)
>     deny ip any host 24.33.66.38 log (685 matches)
>     deny ip any host 218.147.164.29 log (475 matches)
>     deny ip any host 12.232.104.221 log (646 matches)
>     deny ip any host 68.50.208.96 log (519 matches)

Hi Alex:

Where did you get this list of IPs? How long ago did you see the accesses
start? I've been hunting around google and news sites, but so far I can't
find any articles that say anything more than "it will happen" ...

Cheers.


--
Rowan Crowe - Melbourne, Australia