Sobig.f surprise attack today

Damian Gerow damian at sentex.net
Thu Aug 28 20:32:31 UTC 2003


Thus spake Petri Helenius (pete at he.iki.fi) [28/08/03 16:23]:
> >I dont think this would work too well.  The users who are infected 
> >often think something is wrong because their connection and computer 
> >are not working quite right. So they disconnect / reconnect / reboot 
> >so they burn through quite a few dynamic IP addresses along the way.
> >
> This is an artifact of ISP?s wanting to have static IP?s as an add-on 
> premium service
> so they provide short lease times and change IP as often as it?s 
> feasible without
> interrupting service unneccessarily.

Or potentially an artifact of wanting more IP space from ARIN, as opposed to
assigning a static IP to every user we have, even the ones that are only
connected for about an hour a month.  But hey, that's just a minor detail.



More information about the NANOG mailing list