Mirai botnet is back — now as "Meris"

2021-09-09 Thread Töma Gavrichenkov
Peace, An undisclosed (or, even, yet undiscovered by the vendor) vulnerability in SOHO Mikrotik routers seems to be exploited by someone. Approx. 328 thousand devices already joined the botnet, with each having unrestricted access to the uplink (up to 1 Gbps). 42,6% of exploited devices reside

Google Captcha

2021-09-09 Thread Joshua Pool via NANOG
Last month one of our residential /20 blocks started to get the Captcha page when searching Google. Around the same time we get access denied on QVC.com So far nothing out of the ordinary has been observed with regards to the networks and I do not see any blacklisting sites listing the block in

PeeringDB 2021 User Survey

2021-09-09 Thread Steve McManus
Hi All, Another year has passed since our 2020 survey so we're doing it again. As before, we'd like to hear what's working, what's not, and what could be better with PeeringDB. Last year's survey heavily influenced our roadmap and development over the past year. Your feedback is extremely

Re: do bgp optimizers think?

2021-09-09 Thread Jared Mauch
> On Sep 9, 2021, at 11:44 AM, Randy Bush wrote: > > to control inbound traffic, how do bgp optimizers decide how to tune > what they announce? slfow? exploration? ouija board? > > randy Generally via sFlow or other traffic detail models. - Jared

Re: do bgp optimizers think?

2021-09-09 Thread jim deleskie
Suspect for most th answer is poorly. This is a conversation I've had with a few people about how they could be well made -jim On Thu., Sep. 9, 2021, 12:45 p.m. Randy Bush, wrote: > to control inbound traffic, how do bgp optimizers decide how to tune > what they announce? slfow?

do bgp optimizers think?

2021-09-09 Thread Randy Bush
to control inbound traffic, how do bgp optimizers decide how to tune what they announce? slfow? exploration? ouija board? randy

Re: Mirai botnet is back — now as "Meris"

2021-09-09 Thread Mike Hammett
Mikrotik is a very popular router in small to medium ISPs, running, well, everything. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com - Original Message - From: "Töma Gavrichenkov" To: "NANOG" Sent: Thursday,

Call for Participation -- ICANN DNSSEC and Security Workshop for ICANN72 Virtual Annual General Meeting

2021-09-09 Thread Jacques Latour
Hi all  Hope you all had a great summer!!! Let us know if you’re interested in presenting something DNSSEC or security related. Thanks, Jacques Call for Participation -- ICANN DNSSEC and Security Workshop for ICANN72 Virtual Annual General Meeting In cooperation with the ICANN Security

Re: Mirai botnet is back — now as "Meris"

2021-09-09 Thread Brandon Svec via NANOG
Oof. I wonder if there is any connection to their DDNS service outage a couple days ago? https://forum.mikrotik.com/viewtopic.php?t=178256 *Brandon Svec* On Thu, Sep 9, 2021 at 2:43 AM Töma Gavrichenkov wrote: > Peace, > > An undisclosed (or, even, yet undiscovered by the vendor) >

Re: Mirai botnet is back — now as "Meris"

2021-09-09 Thread Töma Gavrichenkov
Peace, On Thu, Sep 9, 2021 at 7:57 PM Brandon Svec via NANOG wrote: > Oof. I wonder if there is any connection to their DDNS service outage a > couple days ago? > https://forum.mikrotik.com/viewtopic.php?t=178256 No, hardly any. That one seems to be just a DNS abuse reporting/delegation

Re: AT Ethernet sales contact

2021-09-09 Thread TJ Trout
Fyi there are 3 main ways to buy at direct retail, through an agent and through a carrier with an att wholesale agreement. If your looking for DIA that is price fixed no matter the sales channel, but transport is a fish market... We have sold circuits to customers at over 50% less than retail

AT Ethernet sales contact

2021-09-09 Thread Brandon Martin
Can anyone provide a sales contact at AT for Ehhernet transport in Indiana/Illinois/Ohio? Unicast replies welcome. -- Brandon Martin

Re: IPv6 woes - RFC

2021-09-09 Thread Owen DeLong via NANOG
> On Sep 8, 2021, at 18:55 , Valdis Klētnieks wrote: > > On Wed, 08 Sep 2021 11:39:50 -0700, Owen DeLong via NANOG said: > >> The reality is that if we get content dual-stacked and stop requiring IPv4 >> for new eyeball installations, that’s the biggest initial win. > > The problem is "get

Re: Mirai botnet is back — now as "Meris"

2021-09-09 Thread Mel Beckman
No rest for the wired  From: NANOG on behalf of Töma Gavrichenkov Sent: Thursday, September 9, 2021 10:07 AM To: Brandon Svec Cc: NANOG Subject: Re: Mirai botnet is back — now as "Meris" Peace, On Thu, Sep 9, 2021 at 7:57 PM Brandon Svec via NANOG wrote: >

FCC: Promoting More Resilient Networks

2021-09-09 Thread Sean Donelan
This month's FCC meeting includes a notice of proposed rulemaking on wireless network resilience cooperative framework, outage reporting, and backup power arrangements. https://docs.fcc.gov/public/attachments/DOC-375607A1.pdf What the NPRM Would Do: • Seek comment on potential

Re: IPv6 woes - RFC

2021-09-09 Thread Masataka Ohta
Owen DeLong via NANOG wrote: The reality is that if we get content dual-stacked and stop requiring IPv4 for new eyeball installations, that’s the biggest initial win. This is my point… That is why I think an announcement of “On X date, we will begin charging extra for IPv4 services and