[governance] Marshall Islands internet service disrupted by botnet attack

[Suresh Ramasubramanian]

The IPs are .. like the spirits of the guy in that story about the Gadarene
swine, Legion.

NSP-SEC type network operator communities can, and do, actively mitigate
these.

Unfortunately, when a country is connected using a slow and expensive
connection (in the pacific islands that means 1..2 satellite providers) it
doesn't take much at all to knock them off the net.

And its nothing to do with US located websites at all. Most of this activity
is from criminals (and they are from different locations - some in eastern
europe, some in china, some in south America.. new zealand, the USA.. )

	suresh


> -----Original Message-----
> From: Nyangkwe Agien Aaron [mailto:nyangkweagien at gmail.com]
> Sent: Tuesday, June 24, 2008 10:33 PM
> To: governance at lists.cpsr.org; Suresh Ramasubramanian
> Subject: Re: [governance] Marshall Islands internet service disrupted
> by botnet attack
> 
> Thanks for the pathetic info Suresh.
> I think that the ISP could acquire the Botnet Mitigation Toolkit that
> could help them deal with that problem.
> In the mean time aren't there tools to track origins of the attack by
> locating the IP of the computers.
> I think this is what is happening when one holds a discussion on a US
> located website. Your town of origine is tracked at the end of your
> message without you writing it. It is anothr way of mitigating such
> attacks. Isn't it?
> 
> Aaron
> 
> On 6/24/08, Suresh Ramasubramanian <suresh at hserus.net> wrote:
> > http://www.circleid.com/posts/cyberattack_marshall_islands_email/
> >
> http://news.yahoo.com/s/afp/20080624/tc_afp/marshallsinternet_080624104
> 236
> >
> > > Email communication in the Marshall Islands was paralysed Tuesday
> after
> > > hackers launched a "zombie" computer attack on the western Pacific
> > > nation's only Internet service provider, AFP reports. The attack
> > > started early Tuesday, in which hackers used zombie computers to
> flood
> > > country's only Internet service provider with spam emails, causing
> > > a complete shutdown of email traffic into the nation of around
> 55,000
> > > people.
> >
> > There are some ideas in
> > http://www.itu.int/ITU-D/cyb/cybersecurity/projects/botnet.html that
> can
> > help, to some extent.
> >
> >        suresh
> >
> > ____________________________________________________________
> > You received this message as a subscriber on the list:
> >     governance at lists.cpsr.org
> > To be removed from the list, send any message to:
> >     governance-unsubscribe at lists.cpsr.org
> >
> > For all list information and functions, see:
> >     http://lists.cpsr.org/lists/info/governance
> >
> 
> 
> --
> Aaron Agien Nyangkwe
> Journalist/Outcome Mapper
> Special Assistant To The President
> Coach of ASAFE Camaroes Street Football Team.
> ASAFE
> P.O.Box 5213
> Douala-Cameroon
> Tel. 237 3337 50 22
> Cell Phone: 237 79 95 71 97
> Fax. 237 3342 29 70

____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.cpsr.org
To be removed from the list, send any message to:
     governance-unsubscribe at lists.cpsr.org

For all list information and functions, see:
     http://lists.cpsr.org/lists/info/governance