Whats going on at Cogent

Thu Oct 18 19:11:23 UTC 2018

Cogent has done well to remediate the compromised MikroTik routers on their
network. 3,000 IPv4 hosts were found on Aug. 25 (
https://twitter.com/bad_packets/status/1033256704941514752) and today, only
a hundred:
https://censys.io/ipv4?q=%28%28%28%22CoinHive.Anonymous%22%29+AND+%28MikroTik%29%29+AND+location.country_code%3A+US%29+AND+autonomous_system.description.raw%3A+%22COGENT-174+-+Cogent+Communications%22&

__

*Troy Mursch*

On Thu, Oct 18, 2018 at 12:05 PM Aaron Gould <aaron1 at gvtc.com> wrote:

> I guess those bots have to sit somewhere.  I don’t know that they would be
> in routers as much as they would be in Microsoft Windows… so if that’s what
> you meant, then I see what you mean Michael
>
>
>
> Niels, I like my cogent and telia internet connections… I just recall
> seeing more ddos on cogent then I did on my previous att, and current
> spectrum… telia is showing a good bit of ddos also
>
>
>
> Let’s put it this way, I can thank Cogent and Telia for helping my get
> better in my ddos mitigation skills  J   … there’s a bright side to
> everything huh
>
>
>
> Aaron
>
>
>
>
>
>
>
> *From:* NANOG [mailto:nanog-bounces at nanog.org] *On Behalf Of *Michael
> Crapse
> *Sent:* Tuesday, October 16, 2018 8:37 PM
> *To:* NANOG list
> *Subject:* Re: Whats going on at Cogent
>
>
>
> Or he's saying that cogent has the biggest network of compromised users.
> Usually ipv4 only eyeball networks tend to have the most bots on net.
>
>
>
>
>
> On Tue, 16 Oct 2018 at 19:22, Niels Bakker <niels=nanog at bakker.net> wrote:
>
> * aaron1 at gvtc.com (Aaron1) [Wed 17 Oct 2018, 00:17 CEST]:
> >However Cogent seems to be the dirtiest in regards to DDOS...
> >however Telia might be catching up... in times past when I receive
> >volumetric DDOS, Cogent typically ranks with the highest on my
> >providers ... AT&T and spectrum seem to be a bit cleaner
>
> So you're saying, Cogent and Telia have the best backbones and
> interconnects and thus deliver the most of your traffic to you,
> even at times of peak utilization?
>
>
>         -- Niels.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20181018/1b61d275/attachment.html>