【Project peko】2ch特化型サーバ構築作戦 Part9
メールしてみた。
Gary-san,
Dear HE.NET technical support/NOC team,
Cc: Jim-san, Shigotonin-san,
[ This is an URGENT message. Please read this carefully. ]
You may already have known, currently, NETSKY worm and its variants are
widely spreading on the Internet. They are not only scattering many
virus mails, but also will perform silly DoS attack to several sites.
I found that one of NETSKY variant will attack following sites from
April 8 to April 11.
In http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_NETSKY.Q&VSect=T
:
: Denial Of Service
:
: This malware launches a Denial of Service (DoS) attack on the following
: Web sites from April 8-11, 2004:
:
: www.edonkey2000.com
: www.kazaa.com
: www.emule-project.net
: www.cracks.am
: www.cracks.st
And I checked IP addresses of these sites, and I found that IP address
of www.edonkey2000.com is [64.62.133.2] , so, I think it locates in your
IP address blocks.
That is, at April 8 (in Japan, the day comes 30 more minutes after), BIG
DoS attack will arrive at this machine. I think it chokes your networks
and switches/routers.
So, I think you should correspond to it immediately. I think it will
occur the big network trouble on your datacenter.
I recommended that you'd be better filter out all packets on which
destination address is [64.62.133.2] at all externally connected routers.
Best regards,
Gary-san,
Dear HE.NET technical support/NOC team,
Cc: Jim-san, Shigotonin-san,
[ This is an URGENT message. Please read this carefully. ]
You may already have known, currently, NETSKY worm and its variants are
widely spreading on the Internet. They are not only scattering many
virus mails, but also will perform silly DoS attack to several sites.
I found that one of NETSKY variant will attack following sites from
April 8 to April 11.
In http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_NETSKY.Q&VSect=T
:
: Denial Of Service
:
: This malware launches a Denial of Service (DoS) attack on the following
: Web sites from April 8-11, 2004:
:
: www.edonkey2000.com
: www.kazaa.com
: www.emule-project.net
: www.cracks.am
: www.cracks.st
And I checked IP addresses of these sites, and I found that IP address
of www.edonkey2000.com is [64.62.133.2] , so, I think it locates in your
IP address blocks.
That is, at April 8 (in Japan, the day comes 30 more minutes after), BIG
DoS attack will arrive at this machine. I think it chokes your networks
and switches/routers.
So, I think you should correspond to it immediately. I think it will
occur the big network trouble on your datacenter.
I recommended that you'd be better filter out all packets on which
destination address is [64.62.133.2] at all externally connected routers.
Best regards,
|
|
|